last executing test programs: 2m10.831621933s ago: executing program 0 (id=1): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 2m8.819129225s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@local, @broadcast, @val={@void, {0x8100, 0x5}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0x0, 0x2000, 0xfc, 0x2f, 0x0, @private=0xa010100, @multicast1}, {0x4e23, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x10, 0x0, @void}}}}}}}}, 0x32) 2m7.165802419s ago: executing program 0 (id=18): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="0f", 0x1}], 0x1) close_range(r0, r0, 0x0) close(0x3) 2m5.368042214s ago: executing program 0 (id=29): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x42000, 0x0) getdents64(r0, &(0x7f0000000c80)=""/135, 0x87) 2m4.725321976s ago: executing program 0 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m1.580377849s ago: executing program 0 (id=42): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 2m1.100167339s ago: executing program 32 (id=42): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 8.870512685s ago: executing program 1 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 8.648358913s ago: executing program 1 (id=667): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000076c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r1, 0x0, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/243) 8.508183554s ago: executing program 1 (id=669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x11, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@x25={0x805, {0x2, 0xd8, 0xf1}}}}, 0x0) 8.278446792s ago: executing program 1 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) lseek(r0, 0x3, 0x1) 7.630208575s ago: executing program 1 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 7.503159745s ago: executing program 4 (id=677): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0xfffff67c}], 0x2, 0x40000022, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x44811}, 0xc010) 7.286349202s ago: executing program 4 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 6.975939858s ago: executing program 4 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000000180)) 6.784189933s ago: executing program 4 (id=681): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288Szk92uU8c7a8/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER09F7OxurpeLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAGiboiiKTvqYfyZ9vu823SkAYCby63+R5OWnvv71P9/6yzz1R61Wq9XqGdRVxXj3qkVEbFVvU75ncDgeAE6Yrfi46S7QIPm3Wj8inmi6E8Bc6zTdAY7Fzu7meifl26m+Hqzut+dzQUby3+o8uL5j0nSa+jkms3p8bUcvnpnQn6UZ9WGe5Py79fyv7bcP03rHnf+sTMp/uH/pU+vk/Hv1/GtOT/7dsfm3Vc6//0j59+QPAAAAAABzLP///0rDx38Xjr4ph/JJx39XZ9QHAAAAAAAAAHjcjjr+3wPG/wMAAIC5VX5WL/3mqYNlk76LrVx+tRPxZG19oGXSxTLLTfcDAAAAAAAAAAAAANqkv38O79VOxCAinlxeLoqi/Kmq14/qqLc/6dq+/dBmTT/JAwDAvo+eql3L34lYjIir6bv+BsvLy0WxuLRcLBdLC/n97HBhsViqfK7N03LZwvAQb4j7w6L8ZYuV21VN+7w8rb3++8r7Gha9Q3TsMRmkv+aE5obCBoBk/9VoxyvSKVMUT0968wEj7P+n0EqsNP24Yv41/TAFAAAAjl9RFEUnfZ33mXTMv9t0pwCAmciv//XjAkequxPaIx7P71er1Wq1Wv2p6qpivHvVIiK2qrcp3zMYjh8ATpit+LjpLtAg+bdaPyKea7oTwFzrNN0BjsXO7uZ6J+Xbqb4epPHd87kgI/lvdfZul28/bjpN/RyTWT2+tqMXz0zoz7Mz6sM8yfl36/lf228fpvWOO/9ZmZT/cO+SufbJ+ffq+decnvy7Y/Nvq5x//5Hy78kfAAAAAADmWP7//xXHf/MmAwAAAAAAAMCJs7O7uZ6ve83H/z83Zj3Xf55OOf/Oo+a/lOblf6Ll/Lu1/L9cW69Xmb//5sH+/+/dzfXf3/nXZ/P0sPkv5JlOemR10iOik+6p00/To2zdw7YHvWF5T4NOt9dP5/wUg3fiRtyMjbgwsm43/T0O2tdG2sueDkbaL4609x9qvzTSPkjfO1As5fZzsR4/iZvx9l572bYwZfsXp7QXU9pz/j3P/62U8+9Xfsr8l1N7pzYt3f+w+9B+X52Ou583bnz+lxeOf3Om2o7eg22rKrfvbAP92fubPDGMn93euHXu7vU7d26tRZqMLL0YafKY5fwHez8LB8//L+y35+f96v56/8PhI+c/L7ajPzH/Fyrz5fa+NOO+NSHnP0w/Of+3U/v4/f8k5z95/3+5gf4AAAAAAAAAAAAAAADAJymKYu8S0Tci4nK6/qepazMBgNnKr/9Fkper1Wq1Wq0+fXVVMd7r1SIi/lq9Tfme4RfjfhkAMM/+FxH/aLoTNEb+LZa/76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq0cd/7OfZx4MMPqYB/qeYLs77HUrw40/H3vjc5+bNP732Xh4/O88Jm6vuh0TDKa0D6e0L0xpXxy79CCtsRd6VOT8n6+Md17mf6Y2/Hobxn+tj3nfBjn/s5XHc5n/l2rrVfMvfjt3+W8ddsXt6I7kf/7Oez89f/v9D1658d71dzfe3fjxpbW1C5cuX75y5cr5d27c3Liw/+/x9HoO5Pzz2NfOA22XnH/OXP7tkvP/Qqrl3y45/y+mWv7tkvPP7/fk3y45//zZR/7tkvN/KdXyb5ec/1dSLf922dndXCjzfznV8m+XvP9/NdXyb5ec/yupln+75PzPpVr+7ZLzP5/qQ+Tv6+FPkZx/PsJl/2+XnP9aquXfLjn/i6mWf7vk/C+lWv7tkvN/NdXyb5ec/9dSLf92yflfTrX82yXn//VUHzL/aac9c0Lk/K+k2v7fLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7scfP+/GTNmzOSZpp+ZAAAAAAAAAAAAAIC6WZxO3PQ2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOIgRCc1JC1Y4xxluz6El9oXUwIlwYoBZIAvWC73rVZ8A2vXQJFsmmgRMKoqKIi/dAWUNRGqiqsig+0Smk+VL18atoP9EtFVQmpUWWigIrUVjRbzZz3fXdmdnZm1ztenz3n95OSZ3fmnDnvnHnP2Xl2/Z8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLMtb5v+Yi3Lsvp/jf9tzLKX1b9eP7axcdubb/YIAQAAgJX6v8b/X7wt3XB4CSs1LfN3r/vHb8/Nzc1lHx78veGvzs2lO8aybHhdljXui67++0dqzcsEj2ejtYGm7wd6bH6wx/1DPe4f7nH/SI/71/W4f7TH/Qt2wALr89/HNB5sW+PLjfkuzW7Phhv3beuw1uO1dQMD8Xc5DbXGOnPDJ7KZ7FQ2nU22LJ8vW2ss/8yW+rbelcVtDTRta3N9hvzos8fjGGphH29r2db8Y0Y/fGs29uMfffb4H1+4dmen2nM3tDxePs4dW+vj/Hy4JR9rLVuX9kkc50DTODd3eE0GW8ZZa6xX/7p9nC8ucZyD88NcVe2v+Wg20Pj6ucZ+Gmr+tV7aT5vDbf99T5Zll+eH3b7Mgm1lA9mGllsG5l+f0XxG1h+jPpVemQ0ta55uWcI8rdepba3ztP2YiK//lrDe0CJjaH6Zfvi5kQWv+3LnaVR/1osdK+1zsN/HSlHmYJwXzzWe9BMd5+C28Pw/u33xOdhx7nSYg+l5N83Brb3m4MDIYGPM6UWoNdaZn4O7WpYfbGyp1qjPb+8+BycunD43Mfvpz7xp5vSxk9Mnp8/s2bVrcs++fQcOHJg4MXNqejL//3Xu7eLbkA2kY2Br2HfxGHhD27LNU3XuG/07Dke7HIcb25bt93E41P7kaqtzQC6c0/mx8XB9p49eGcgWOcYar8/OlR+H6Xk3HYdDTcdhx58pHY7DoSUch/Vlzu1c2nuWoab/Oo3hRv0s2Ng0B9vfj7TPwX6/HynKHBwN8+Jfdy7+s2BzGO8T48t9PzK4YA6mpxvOPfVb0vv90QON0mle3lW/45aR7OLs9Pn7Hjt24cL5XVkoq+JVTXOlfb5uaHpO2YL5OrDs+Xp45nVP3NXh9o1hX42+qf6/0UVfq/oye+/r/lo1frp13p8tt+7OQumz1d6fnX6a1/dn6iW77M/6Mp+fWPl78dSXNp1/hxc5/8a+/6V8e+mhHh8cHsqP38G0d4ZbzsetL9VQ49xVa2z7xYmlnY+Hw3+rfT6+vcv5eFPbsv0+Hw+3P7l4Pq71+m3HyrS/nqNhnpya7H4+ri+zafdy5+RQ1/PxPaHWwv5/Y+gUUl/UNHcWm7dpW0NDw+F5DcUttM7TPS3LD4ferL6tp3df3zzdcU/+WIPp2c1brXk61rZsv+dpOl8tNk9rvX77dn3aX8/RMC9u39N9ntaXeXbvys+d6+OXTefOkV5zcHhwpD7m4TQJ8/P93Po4B+/Ljmdns1PZVOPekcZ8qjW2NX7/0ubgSPhvtc+Vm7rMwR1ty/Z7DqafY4vNvdrQwiffB+2v52iYF0/e330O1pd5cH9/37vuCLekZZreu7b/fm2x33nd1babbuTvvOrj/Jv93X83W1/m1IHl9pnd99O94ZZbOuyn9uN3sWNqKlud/bQpjPPagcX3U3089WW+enCJ8+lwlmWXPvlA4/e94e8rf37xe99u+btLp7/pXPrkAy/ceuJvlzN+ANa+l/KyIf9Z1/SXqaX8/R8AAABYE2LfPxBqov8HAACA0oh9f/xX4Yn+HwAAAEoj9v1DoSYV6f83PXht5qVLWUrmzwXx/rQbHsqXixnXyfD92Ny8+u0PPDX9k7+8tLRtD2RZ9tOHfrPj8pseiuPKjYVxXn176+0LV7y0pO0ffWR+ueb8+tfD48fns9Rp0CmCO5ll2TO3fbmxnbGPXGnUZx862qgfuPzE4/VlXjyYfx/Xf/5V+fJ/EMK/h08ca1n/+bAffhDq5Ls774+43reuvHHz/kfntxfXq219eeNpP/nR/HHj5+R85fF8+bifFxv/X33p6W/Vl3/s9Z3Hf2mg8/ifDo/7VKj/89p8+ebXoP59XO8LYfxxe3G9+7753Y7jv/rFfPlz78iXOxpq3P6O8P22d1ybad5fj9WOtTyv7J35cnH7k9/7ncb98fHi47ePf/TIlZb90T4/nv3n/HEm2paPt8ftRH/Rtv364zTPz7j9p3/7aMt+7rX9qx94/rX1x23f/r1tyw22rd/+iU1/+IUvd9xeHM/hPzvX8nwOvz8cx2H7T340zMdw//9e/XLLdqOj7289/8Tlv77xUsvzid7143z7V99yslH/Y+wnv3/Ly259+eW76/suy577YP54vbZ/8o/Otoz/G3fsbLwe8f6Y0W/f/mLi9s9/avzM2dmLM1NNe7Xx2TnvycezbnT9hvp4bwvn1vbvj5y98LHp82OTY5NZNlbej9C7bt8M9YW8XF7u+jsfCa/nXV97ZsP2f/pSvP1fHs5vv/Lu/OfWG8JyXwm3b8xfv7naCrf/5JY7Gsd37dn8+5Ycex9s3vafB5a0YHj+7e8L4nw/9+qPNfZD/b7Gz414XK9w/N+fyh/nO2G/zoVPZt56x/z2mpePn41w5YP58b7i/RdOc/F1/ZPwer/3B/njx3HF5/v98D7mu5taz3dxfnzn0kD74zc+xeNyOJ9kl/P741Jxf1958Y6Ow4ufQ5JdvrPx/e+mx7lzWU9zMbOfnp04NXPm4mMTF6ZnL0zMfvozR06fvXjmwpHGZ3ke+Xiv9efPTxsa56ep6X17s8n1WZadzSZX4YR1Y8Zf/2pp4z/3yPGp/ZPbp6ZPHLt44sIj56bPnzw+O3t8emp2+7ETJ6Y/1Wv9malDu3Yf3LN/9/jJmalDBw4e3HNwfObM2fow8kH1sG/yE+Nnzh9prDJ7aO/BXfffv3dy/PTZqelD+ycnxy/2Wr/xs2m8vvZvjJ+fPnXswszp6fHZmc9MH9p1cN++3T0/DfD0uROzYxPnL56ZuDg7fX4ify5jFxo313/29Vqfcpr9t/z9bLta/kF82fvu3Zc+n7Xuqc8t+lD5Im0fIHotfBbNP7zi3IGlfB/7/uFQk4r0/wAAAFAFse8fCTXR/wMAAEBpxL5/XaiJ/h8AAABKI/b9o6EmFen/5f/l/5eW/8/vl/+vVv7/3CfzXOlaz//H/Lz8fzXc5Pz/irffh/z/3d3ulP/vQf7/pubnV2Tg5o9f/l/+n4WKlv+Pff/6LKtk/w8AAABVEPv+DaEm+n8AAAAojdj33xJqov8HAACA0oh9/8tCTSrS/8v/Lyn/v7tX4Kr8+X/X/1+9/P/8eUj+P7ei/H98ceT/K2PZ+ftHH275tgT5/67k/3uQ/1+7+f8CjF/+X/6fdsOL3nOz8v+x77811KQi/T8AAABUQez7Xx5qov8HAACA0oh9/22hJvp/AAAAKI3Y928MNalI/y//f93X/x9t/kb+v3X88v+tXP8/zIe1eP3/psHI/68Nrv/fnfx/D9ed/x+V/1+L+f/h/o6/2Pn/nsOX/+eGKNr1/2Pf/4pQk4r0/wAAAFAFse9/ZaiJ/h8AAABKI/b9rwo10f8DAABAacS+//ZQk4r0//L/153/byH/3zp++f/O80P+fw3m/7te/z//Sv6/WOT/u5P/78H1/6uV/+/z+Iud/+/39f+H396+vvw/nRQt/x/7/leHmlSk/wcAAIAqiH3/HaEm+n8AAAAojdj3vybURP8PAAAApRH7/k2hJhXp/+X/5f/l/+X/5f87b793/j8n/18s8v/dyf/3IP8v/y//v7T8f4c3v/L/dFK0/H/s++8MNalI/w8AAABVEPv+u0JN9P8AAABQGrHv/5lQE/0/AAAAlEbs+zeHmlSk/9/04LVHv9b4Sv4/k/+X/69A/v/eEfl/+f9yk//vTv6/B/l/+X/5/yVe/3+h5eT/1/V6MEqjaPn/2Pe/NtRkQePX/o4UAAAAWCti3/+6UJOK/P0fAAAAqiD2/XeHmuj/AQAAoDRi3z8WarL2+v8PDVzHSq7/X678/5/+9ZN3Z/L/8v89tl/S/H+cBvL/FSf/3538fw/y//L/8v+rkv+nOoqW/499/5ZQk7XX/wMAAACLiH3/1lAT/T8AAACURuz77wk10f8DAABAacS+f1uoSUX6f/n/cuX/I/l/+f9u2y9p/j+R/682+f8Omg7SNZL/H5P/l/9fi+MvR/4/vvuV/6c/ipb/j33/60NNKtL/AwAAQBXEvn97qIn+HwAAAEoj9v1vCDXR/wMAAEBpxL5/R6hJRfp/+X/5f/l/+X/5/87bl/9fm+T/u1tu/n/E9f/l/+X/K5b/d/1/+qto+f/Y978x1KQi/T8AAABUQez7d4aa6P8BAACgNOK/38z/3av+HwAAAMoo9v3joSYV6f9XkP+fG5T/T+T/W8df1Px/Tf5f/l/+v/Tk/7tbI9f/l/8vUP6/frv8v/y//D/Xq2j5/9j3vynUpCL9PwAAAFRB7PvvCzXR/wMAAEBpxL5/ItRE/w8AAAClEfv+yVCTivT/rv9fufz/uirn/13/X/5f/r/85P+7k//vQf7f9f/Llv/PMvl/bqqi5f9j378r1KQi/T8AAABUQez7d4ea6P8BAACgNGLfvyfURP8PAAAApRH7/r2hJhXp/+X/K5f/r/T1/+X/5f/l/8tP/r87+f8e5P/l/8uW/3f9f26youX/Y99/f6hJRfp/AAAAqILY9+8LNdH/AwAAQGnEvn9/qEno/zv9u24AAABgbYl9/4FQk4r8/V/+vyT5/9/6+5Zty//L/3fbfn/y/+vl/0OV/y+Wkub/2w+L6yb/34P8v/y//L/8P31VtPx/7PsPhppUpP8HAACAKoh9/5tDTfT/AAAAUBqx7//ZUBP9PwAAAJRG7Pt/LtSkIv2//H9J8v9t5P/l/7tt3/X/5f/LrKT5/74pVf5/QP5f/r9Y45f/l/9noRuf/49fLS3/H/v+Q6EmFen/AQAAoApi3//zoSb6fwAAACiN2Pe/JdRE/w8AAAClEfv+w6EmFen/5f/l/+X/5f9vTP7/LVm7Iub/65NH/r9c5P+7K1X+3/X/5f8LNn75f/l/Fira9f9j3//WUJOK9P8AAABQBbHvfyDURP8PAAAApRH7/reFmuj/AQAAoDRi3/9gqElF+n/5f/l/+X/5f9f/77x9+f+1Sf6/O/n/HuT/5f/l/+X/6aui5f9j3//2UJOK9P8AAABQBbHvf0eoif4fAAAASiP2/e8MNdH/AwAAQGnEvv9doSYV6f/l/+X/i5T/H2kbv/y//H8m/y//v0zy/93J//cg/y//L/8v/09fFS3/H/v+Xwg1qUj/DwAAAFUQ+/6HQk30/wAAAFAase9/d6iJ/h8AAABKI/b97wk1qUj/L/8v/1+k/H/m+v/y/5XJ/2cte1X+v3/k/7uT/+9B/l/+X/5f/p++Klr+P/b97w01qUj/DwAAAFUQ+/5fDDXR/wMAAEBpxL7/faEm+n8AAAAojdj3/1KoSUX6f/l/+f9i5f/nLmWu/5/I/+f6kv+vr1So/L/r/98o8v/dyf/30CH/v07+X/5f/l/+n+tWtPx/7PvfH2pSkf4fAAAAqiD2/R8INdH/AwAAQGnEvv+DoSb6fwAAACiN2Pc/HGpSkf5f/r+S+f/0lIuX/3f9f/n/qlz/X/7/RpH/707+vwfX/5f/l/+X/6evipb/j33/I6EmFen/AQAAoApi3/9oqIn+HwAAAEoj9v0fCjXR/wMAAEBpxL7/w6EmFen/5f8rmf8v8PX/y5b/H2qZHzcm/7+ukPn/0abXM81L+X/5/1Ug/9+d/H8P8v8hP58NyP8XMP8fZvP6RdaX/6eIipb/j33/R0JNKtL/AwAAQBXEvv+XQ030/wAAAFAase//lVAT/T8AAACURuz7fzXUpCL9v/y//L/8v+v/u/5/5+3L/69N8v/dyf/3IP/v+v9Fzv/3IP9PERUt/x/7/l8LNVm08Xvhv5bwNAEAAIACiX3/R0NNKvL3fwAAAKiC2PcfCTXR/wMAAEBpxL7/aKhJRfp/+f/2/H+8oqr8v/z/msv/D8n/5+T/q61/+f/X3Jpl8v/y//L/8v/y//L/rETR8v+x7z8WalKR/h8AAACqIPb9vx5qov8HAACA0oh9//FQE/0/AAAAlEbs+6dCTSrS/8v/u/5/v/L/P5X/v9n5f9f/D+T/q831/7uT/+9B/l/+X/5f/p++Klr+P/b906EmFen/AQAAoMTSr4Nj338i1ET/DwAAAKUR+/6ToSb6fwAAACiN2Pd/LNSkIv2//L/8v+v/34z8/1DL8vL/Ofl/+f9+kP/vTv6/B/l/+X/5f/l/+qpo+f/Y98+EmlSk/wcAAIAqiH3/x0NN9P8AAABQGrHv/0Soif4fAAAASiP2/adCTSrS/8v/y/9XPf9fy7LLrv8v/99p+/L/a5P8f3fy/z3I/8v/y//L/9NXRcv//z979/Fk11nmcfyOx5bUs/H8CbOZDSuWsDIb9mzZUcXaRJODbXIGkzFgwOScczI554wJJudooqFKlFvP86hb9/Y5kvp033Pe9/PZPCMNct+2BdQP1bfe3P1Xxi2d7H8AAADoQe7+e8Ut9j8AAAA0I3f/veMW+x8AAACakbv/PnFLJ/tf/6//773/X23l/f/9/3r9/xn6f/3/FNb6+0sv7Ncf2P/f8U5X3UP/r//X/w/S/+v/9f+ca279f+7++8Ytnex/AAAA6EHu/vvFLfY/AAAANCN3//3jFvsfAAAAmpG7/6q4pZP9r//X/+v/9f/7+v+b9P/6/2Xz/v8w/f8I/b/+X/+v/2dSc+v/c/c/IG7pZP8DAABAD3L3PzBusf8BAACgGbn7HxS32P8AAADQjNz9D45bOtn/+n/9v/5/Kf3/Ce//n/P96P/1/5vo/4fp/0fo//X/+n/9P5OaW/+fu/8hcUsn+x8AAAB6kLv/oXGL/Q8AAADNyN3/sLjF/gcAAIBm5O5/eNzSyf7X/+v/9f9L6f+P6f1//b/+f+FuXJ39zwT9/zr9/4iR/n+10v8POe9+fvO3t5zPfwD9v/6fdXPr/3P3PyJuuctqdeJiv0kAAABgVnL3PzJu6eTP/wEAAKAHufuvjlvsfwAAAGhG7v5r4pZO9r/+X/+v/9f/6/83f339/zKdX39/8sBfr/8PB/b/d/jfK+/Zb//v/f9h3v/X/+v/Odfc+v/c/dfGLZ3sfwAAAOhB7v5HxS32PwAAADQjd/+j4xb7HwAAAJqRu/8xcUsn+1//31r//9/7ft2e/n+3dtH/6//1//r/1h22v9f/h67f/9+pH+r/9f/6f/0/hzO3/j93/2Pjlk72PwAAAPQgd//j4hb7HwAAAJqRu//xcYv9DwAAAM3I3f+EuKWT/a//b63/3//rvP+v/9/09fX/+v+W6f+H6f9HtPL+/0X+rtl2P39Y2/78+n/9P+vm1v/n7n9i3NLJ/gcAAIAe5O5/Utxi/wMAAEAzcvc/OW6x/wEAAKAZufufErd0sv/1//r/ZfT/+RX0//r/o+//k/5/mfT/w/T/I1rp/y/Stvv5pX9+/b/+n3Vz6/9z9z81bulk/wMAAEAPcvc/LW6x/wEAAKAZufufHrfY/wAAANCM3P3PiFs62f/6f/3/Mvp/7//r/73/r/8/P/r/Yfr/Efp//b/+X//PpObW/+fuvy5u6WT/AwAAQA9y9z8zbrH/AQAAoBm5+58Vt9j/AAAA0Izc/c+OWzrZ//p//b/+X/+v/9/89fX/y6T/H6b/H6H/1//r//X/TGpG/f+eX3Vq9Zy4pZP9DwAAAD3I3f/cuMX+BwAAgGbk7n9e3GL/AwAAQDNy9z8/bulk/+v/Z9P/7+Z8bfX/O6vV6qL7/7vq/5fd/+/s+edZvy/1//r/Y6D/H6b/H6H/1//r//X/TGpG/f/uj3P3vyBu6WT/AwAAQA9y918ft9j/AAAA0Izc/S+MW+x/AAAAaEbu/hfFLZ3sf/3/bPr/XW31/97/P/f3R0/9v/f/1+n/j4f+f5j+f4T+X/+v/9f/M6m59f+5+18cN5247KK/RQAAAGBmcvffELd08uf/AAAA0IPc/S+JW+x/AAAAWKjr1n4md/9L45ZO9r/+f9r+/8Sen9P/6//P/f2h/9f/6/+Pnv5/mP5/hP5f/6//1/8zqbn1/7n7Xxa3dLL/AQAAoAe5+2+MW+x/AAAAaEbu/pfHLfY/AAAANCN3/yvilk72v/7f+//6f/2//n/z19f/L5P+f5j+f4T+X/+/3f7/5Nn/U/9PGy6g/z99+vTVR97/5+5/ZdzSyf4HAACAHuTuf1XcYv8DAABAM3L3vzpusf8BAACgGbn7XxO3dLL/9f9H0f+fqRVn3f/nb/Vl9f/XrFb6f/2//l//P0z/P0z/P0L/r//3/r/+n0nN7f3/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA0I3f/G+KWTva//t/7/wvq/73/r//f9/0srP+/baX/PxaL6P93Dv76c+//r9X/6/8HdNf/3+3O+36o/9f/s25u/X/u/jfGLZ3sfwAAAOhB7v43xS32PwAAADQjd/+b4xb7HwAAAJqRu/8tcdOlnex//b/+X/+v/9f/b/76x/z+/4nVaqX/n8Ai+v8Bc+//vf+v/x/SXf9/Dv2//p91c+v/c/e/NW7pZP8DAABAD3L3vy1usf8BAACgGbn73x632P8AAADQjNz974hbOtn/+n/9v/5f/998/3/tIvp/7/9PRP8/TP8/Qv+v/9f/6/85Ftvq/3P3vzNu6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAA0Izc/e+JWzrZ//p//f+F9P/5OfX/bfX/J2fX/5/a99fr5P1//f9E9P/D9P8j9P/6f/3/dfp/pjS39/9z9783bulk/wMAAEAPcve/L279T7f2PwAAADQjd//74xb7HwAAAJqRu/8DcUsn+1//r//3/r/+v/n3//X/XdH/D9P/j9D/6//1/97/Z1Jz6/9z938wbulk/wMAAEAPcvd/KG6x/wEAAKAZufs/HLfY/wAAANCM3P03xS2d7H/9v/5f/6//1/+f+Weo/2+D/n/Y8fT/O/p//X/18/8V/y7Q/+v/x349bZpb/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgEW6dMPP5e7/eNzSyf7X/+v/9f/6f/3/5q+v/18m/f8w7/8f5H+u3/sj/f/59vP/t+9HS3v//9z//tL/6/+Z3tz6/9z9n4hbOtn/AAAA0IPc/Z+MW+x/AAAAaEbu/k/FLfY/AAAANCN3/6fjlk72v/5f/99M/3/7h9D/6//1/93T/w/T/4/w/v9W389f+ufX/+v/WTe3/j93/2filk72PwAAAPQgd/9n4xb7HwAAAJqRu/9zcYv9DwAAAM3Y3f0Zl3W4//X/W+v/d//6+n/v/+v/9f/6/2np/4fp/0fo//X/+n/9P5OaW///+d1fdWr1hbilk/0PAAAAPcjd/8W4xf4HAACAZuTu/1LcYv8DAABAM3L3fzlu6WT/6/+9/7+M/v/06dNX6//1//u/n7P9/y36f4r+f5j+f4T+X/+v/9f/M6m59f+5+78St3Sy/wEAAKAHufu/GrfY/wAAANCM3P1fi1vsfwAAAGhG7v6vxy2d7H/9/+2f4/L6+aPt/2/4/439/yn9v/f/9f8r7//r/yei/99sJ67+f0SL/f+p8//2t93PH9a2P7/+X//Purn1/7n7vxG3dLL/AQAAoAe5+78Zt6zt/5uP8VMBAAAAU8rd/624xZ//AwAAQDNy9387bulk/+v/j+/9/9v/3vXy/v/OavPn1//r//X/+v+jpv8fpv8f0WL/fwG23c8v/fPr//X/rJtb/5+7/ztxy/7hd9mFfZcAAADAnOTu/27c0smf/wMAAEAPcvffHLfY/wAAANCM3P3fi1s62f/6/+Pr//f28633/8fz/v8p/b/+f8r+/xL9fxv0/8P0/yOOrP8/kX99/f8R2vbn1//v7f/zd7P+v3dz6/9z938/bulk/wMAAEAPcvf/IG6x/wEAAKAZuft/GLfY/wAAANCM3P23xC179v+mtrsV+n/9/3L7f+//6/+9/6//X6f/3xn8/55v/39ydbj+P+n/vf+v/++1//f+P2fMrf/P3f+juMWf/wMAAMDiXHbAz+fu/3HcYv8DAABAM3L3/yRusf8BAACgGbn7fxq33HrJtj7SsdL/6//1//p//f/mr6//Xyb9/zDv/4/Q/0/Rz1+h/2+j/1+t9P8c3tz6/9z9P4tb/Pk/AAAANCN3/8/jFvsfAAAAmpG7/xdxi/0PAAAAzcjd/8u4pZP9r//X/x+y/99NM/X/Z+j/z9D/b6b/Px76/2H6/xH6f+//6/+9/8+k5tb/5+7/VdzSyf4HAACAHuTu/3XcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3dLL/t9b/x99q/f92+/9LvP+/S/+v/9/09fX/y6T/H6b/H6H/1//r//X/TGpu/X/u/t/FLZ3sfwAAAOhB7v7fxy32PwAAADQjd/8f4hb7HwAAAJqRu/+PcUsn+9/7/333/xO8/6//H+7/T+79Ovp//b/+/+jp/4fp/zerf1D6f/2//l//z6Tm1v/n7v9T3NLJ/gcAAIAe5O7/c9xi/wMAAEAzcvffGrfY/wAAANCM3P1/iVs62f/6f/2//t/7//r/zV9f/79M+v9h2+z/7375+Jf1/v/W+//8CPp//b/+n0nMrf/P3f/XuKWT/Q8AAAA9yN3/t7jF/gcAAIBm5O7/e9xi/wMAAEAzcvf/I27pZP+P9P9n3y7X/w/S/+///Pr/zb8/9P/6f/3/0dP/D/P+/wj9v/f/9f/6fyY1t/4/d/8/45ZO9j8AAAD0IHf/bXGL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf73/v+S+v8r9P/6f/2//l//P0L/P0z/P0L/r//X/+v/mdTc+v/c/f8JAAD///dEVNI=") creat(&(0x7f0000000300)='./bus\x00', 0x14) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 6.649505974s ago: executing program 1 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r1], 0x20}}, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) 6.317036611s ago: executing program 33 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r1], 0x20}}, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) 5.772833085s ago: executing program 4 (id=689): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x7, 0x6, 0x7267, 0xb, 0x3, 0x1ffffffffff, 0x6, 0x61, 0x35}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.443954522s ago: executing program 2 (id=693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="dc7aec93512e677ba935c9a4e6d9a04b1ce78f961458a7d7dc532f6911a03e65", 0x20}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f00000002c0)=""/216, 0xd8}], 0x2}, 0x2000) 4.247498787s ago: executing program 4 (id=695): socket$packet(0x11, 0x4000000000002, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 3.864930239s ago: executing program 34 (id=695): socket$packet(0x11, 0x4000000000002, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 3.853765509s ago: executing program 3 (id=697): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) open(&(0x7f0000000180)='./file0\x00', 0x2240, 0x6a) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) 3.548286044s ago: executing program 3 (id=698): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000180)={[{@discard_async}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3.46969306s ago: executing program 2 (id=699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3.117803329s ago: executing program 2 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)=@arm64) 2.691299813s ago: executing program 2 (id=701): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000013c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[], 0x0) 1.969476421s ago: executing program 3 (id=702): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 393.230899ms ago: executing program 3 (id=703): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="71050501ea020606847efd0930ea56ccf61cab1d033e089901eb"], 0x1a) 387.235249ms ago: executing program 2 (id=704): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47bb50b8b810470d50f5cb1ece9ead3459a5", 0x54}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 152.536238ms ago: executing program 3 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 357.77µs ago: executing program 3 (id=706): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x21000006, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 2 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$eJzs3T9sG2UfAOD3Lvm+Jv3afknpUCQkLFEJBChKOgGpRJqmTZM2FBVaIRbXSdw24MRV4iCGDmGrxITEgBgqkNgyVRlYy8jIwlgmhkowsCAhVQTZPie5i62YKk5oeR6pOd/73/75Xr83XN84Ubk5t5SbW8oVFnLlmetLJ3MflUvL88UQ75H97p/2dCJOYr9/Lp05987VkyF8N/vjw/X19fVQ1R2aGtry+vffbs9sPTbEmTrVdpu3tlveDyEc2zauqq4QwnvfhhCFEE4naaPJsTeEcCTU867e/vRabpdGc+9B8VT+0dSdteETk6t311q/9yiEL0vPvnpj/pcXuoZ/enmXugcAAAAAAAAAAAAAAAAA4Ak3fvnSlbcHh8L9KHSvRtuf1x1Pjq2ej13fNc93/s0CAAAAAAAAAAAAAAAAAADAP9Tm8/+56GiT5//HkuNIi/rrb3Z+jHTOxFuXxs4ODiX7v0fb8l9Lkn493RX6m+z7nt3//XSmfvP937f387ga42v02xeieCB1HscDAyF8nWz8fjw6GJfKS5VXrpeXF2Z3bRhPrHT867v3p6KTbOi/U/x//r5ebjTTfuf3/39m27epen5t975iT7V0/Ltalvvmk6it6/9Mpt5exJ/Hl45/dy2td2uBkfoEUI3/Z907x38s036n4n8khJCLqmPNpWaA6hqmmt5qvUJaOv7/qaWlps7kg2x1/f+Rif/ZTPv7Nf+vZH+IaCod///W0npSJTav//545+v/XKb9/Yh/dfwrfv/bko7/gXpid6pI7ZNsd/4fz7TfqfhfiZNxHolS34DVqJ7e6v+rIy0d/55t+Zv3f3Fb67/zmfp7df/X6Ldx/9eY/l+K6vd/NJeOf2/Lcu1e/xOZep2e/0dq6z8eVzr+B2tp6bVzX+1vu/GfzLTfqfjXViU9jfhvzid/Hqinf2X915Z0/P9XT4y3llip/a2t/6Kd1/8XMu3vx/qvOv6VuLO9Pi3S8T/Uslw1/j+08ft/MVOv8/HfzdXEv086/odblqtd/z07x38qU6/T8X+xk40DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAFGk2NfiOKB1HkcDwyEcCY5Px4ORtOF2fx0qTzz4VIIY0l6LhyNbpTK04VSfm6hPFvMF0ql8kwIZ5P8Y6EnWiqVK/n5wq1zG231RjeLhcXKdLFQCSGMJ+nPhcONtqbnKvOFWyGE8xt5/4/Li7duFhbys3OLbwwODg6GiY0x9EfFjyvFhUq993puCJMbdfuiLYOrZV/YGMuh6IPy8uJCoVRLv7ilTqk8UyhtqTOV5H0e+qPK4vLCTKFSzJfKNxr97aeR5Dg2cfndyxeHtuVfi+rH0b0dFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/0/3h178IIXTXz+IQQi5KXkTJv5R7D4qn8o+m7qwNn5hcvbv2sFkZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi79ozQQRHEAfjMWWnoMq2W3s11RRAtXBE+gx/AwehQv4R0sUqRNEQLJLIT9A9sk1fc1D+bHzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOUe37r317qJSHG1vYz4/fz7P86fS/2+m75/cYYZOZ2nl+7+oW7Kv6dRfluOVm3ep5v110dM1N7PYE+G+3Qw7jM0t29z8/V9ryPlKiLakt+knKtq2VsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI4dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4FQAA//8KEyDQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0xc33, 0x1}, {0xfffffff9, 0xbea}]}, 0x14, 0x1) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) kernel console output (not intermixed with test programs): T10] null_blk: rq ffff888022249380 timed out [ 119.826507][ T10] null_blk: rq ffff888022249500 timed out [ 119.832276][ T10] null_blk: rq ffff888022249680 timed out [ 119.838794][ T10] null_blk: rq ffff888022249800 timed out [ 119.845543][ T10] null_blk: rq ffff888022249980 timed out [ 119.851526][ T10] null_blk: rq ffff888022249b00 timed out [ 119.857347][ T10] null_blk: rq ffff888022249c80 timed out [ 119.863180][ T10] null_blk: rq ffff888022249e00 timed out [ 119.869131][ T10] null_blk: rq ffff888022249f80 timed out [ 119.874979][ T10] null_blk: rq ffff88802224a100 timed out [ 119.880947][ T10] null_blk: rq ffff88802224a280 timed out [ 119.887511][ T10] null_blk: rq ffff88802224a400 timed out [ 119.893368][ T10] null_blk: rq ffff88802224a580 timed out [ 119.899372][ T10] null_blk: rq ffff88802224a700 timed out [ 119.905141][ T10] null_blk: rq ffff88802224a880 timed out [ 119.911071][ T10] null_blk: rq ffff88802224aa00 timed out [ 119.916878][ T10] null_blk: rq ffff88802224ab80 timed out [ 119.922727][ T10] null_blk: rq ffff88802224ad00 timed out [ 119.928570][ T10] null_blk: rq ffff88802224ae80 timed out [ 119.937195][ T10] null_blk: rq ffff88802224b000 timed out [ 119.946264][ T10] null_blk: rq ffff88802224b180 timed out [ 119.952147][ T10] null_blk: rq ffff88802224b300 timed out [ 119.958000][ T10] null_blk: rq ffff88802224b480 timed out [ 119.963851][ T10] null_blk: rq ffff88802224b600 timed out [ 119.976150][ T10] null_blk: rq ffff88802224b780 timed out [ 119.981984][ T10] null_blk: rq ffff88802224b900 timed out [ 119.988489][ T10] null_blk: rq ffff88802224ba80 timed out [ 119.994352][ T10] null_blk: rq ffff88802224bc00 timed out [ 120.000227][ T10] null_blk: rq ffff88802224bd80 timed out [ 120.005994][ T10] null_blk: rq ffff88802224bf00 timed out [ 120.013057][ T10] null_blk: rq ffff88802224c080 timed out [ 120.018953][ T10] null_blk: rq ffff88802224c200 timed out [ 120.024718][ T10] null_blk: rq ffff88802224c380 timed out [ 120.030631][ T10] null_blk: rq ffff88802224c500 timed out [ 120.036613][ T10] null_blk: rq ffff88802224c680 timed out [ 120.042568][ T10] null_blk: rq ffff88802224c800 timed out [ 120.049645][ T10] null_blk: rq ffff88802224c980 timed out [ 120.055671][ T10] null_blk: rq ffff88802224cb00 timed out [ 120.061580][ T10] null_blk: rq ffff88802224cc80 timed out [ 120.067692][ T10] null_blk: rq ffff88802224ce00 timed out [ 120.073465][ T10] null_blk: rq ffff88802224cf80 timed out [ 120.079351][ T10] null_blk: rq ffff88802224d100 timed out [ 120.085124][ T10] null_blk: rq ffff88802224d280 timed out [ 120.096579][ T10] null_blk: rq ffff88802224d400 timed out [ 120.102463][ T10] null_blk: rq ffff88802224d580 timed out [ 120.108432][ T10] null_blk: rq ffff88802224d700 timed out [ 120.114199][ T10] null_blk: rq ffff88802224d880 timed out [ 120.120127][ T10] null_blk: rq ffff88802224da00 timed out [ 120.125995][ T10] null_blk: rq ffff88802224db80 timed out [ 120.172309][ T6818] loop3: detected capacity change from 0 to 256 [ 120.601978][ T6833] loop4: detected capacity change from 0 to 1024 [ 120.703845][ T6833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.766461][ T6833] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.056346][ T786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.258396][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 121.281045][ T786] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 121.303810][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.327276][ T786] usb 4-1: config 0 descriptor?? [ 121.339220][ T786] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 121.516494][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.540747][ T78] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 15) [ 121.556221][ T5791] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.571486][ T78] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 121.594094][ T78] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.594094][ T78] [ 121.665877][ T78] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 121.687707][ T78] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 121.700859][ T78] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.700859][ T78] [ 121.710791][ T78] EXT4-fs (loop4): Total free blocks count 0 [ 121.724356][ T78] EXT4-fs (loop4): Free/Dirty block details [ 121.731091][ T78] EXT4-fs (loop4): free_blocks=4293918720 [ 121.737706][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.748871][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.758739][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.758839][ T5791] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 121.771770][ T78] EXT4-fs (loop4): dirty_blocks=2976 [ 121.786623][ T787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.797310][ T78] EXT4-fs (loop4): Block reservation details [ 121.806338][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.829653][ T787] usb 2-1: config 0 descriptor?? [ 121.844819][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.872894][ T5791] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 121.891142][ T5791] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 121.910060][ T5791] usb 3-1: Manufacturer: syz [ 121.929267][ T5791] usb 3-1: config 0 descriptor?? [ 122.186804][ T5791] rc_core: IR keymap rc-hauppauge not found [ 122.196672][ T5791] Registered IR keymap rc-empty [ 122.211694][ T5791] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 122.225713][ T5791] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 122.280622][ T787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xe [ 122.288500][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 122.327819][ T787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 122.353570][ T786] gspca_vc032x: reg_w err -71 [ 122.359753][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.365125][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.369415][ T787] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 122.388382][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.413512][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.446149][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.446673][ T787] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 122.458584][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.484835][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.500749][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.523840][ T5870] usb 3-1: USB disconnect, device number 7 [ 122.526594][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.571171][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.593703][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.617911][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.645581][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.666420][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.671781][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.681376][ T787] usb 2-1: USB disconnect, device number 5 [ 122.696261][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.705938][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.716286][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.721722][ T786] gspca_vc032x: Unknown sensor... [ 122.746263][ T786] vc032x: probe of 4-1:0.0 failed with error -22 [ 122.766655][ T786] usb 4-1: USB disconnect, device number 6 [ 122.926029][ T6873] loop4: detected capacity change from 0 to 32768 [ 122.983407][ T6873] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.109907][ T6898] loop3: detected capacity change from 0 to 1024 [ 123.314161][ T6873] XFS (loop4): Ending clean mount [ 123.340991][ T6904] syzkaller1: entered promiscuous mode [ 123.342127][ T6873] XFS (loop4): Quotacheck needed: Please wait. [ 123.366250][ T6904] syzkaller1: entered allmulticast mode [ 123.423095][ T6906] loop1: detected capacity change from 0 to 128 [ 123.447156][ T6873] XFS (loop4): Quotacheck: Done. [ 123.502807][ T28] audit: type=1800 audit(1756251977.279:12): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 123.626749][ T28] audit: type=1800 audit(1756251977.389:13): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 123.668085][ T6048] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.955879][ T6918] dlm: non-version read from control device 2147479552 [ 124.074006][ T6920] loop1: detected capacity change from 0 to 256 [ 124.124718][ T6920] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 124.156379][ T786] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.166517][ T6920] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 124.270484][ T28] audit: type=1800 audit(1756251978.049:14): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.205" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 124.311486][ T6920] syz.1.205: attempt to access beyond end of device [ 124.311486][ T6920] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 124.326919][ T28] audit: type=1800 audit(1756251978.079:15): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.205" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 124.363386][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.382359][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.384938][ T28] audit: type=1800 audit(1756251978.139:16): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.205" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 124.394584][ T6920] syz.1.205: attempt to access beyond end of device [ 124.394584][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.416981][ T6925] syz.1.205: attempt to access beyond end of device [ 124.416981][ T6925] loop1: rw=34817, sector=184, nr_sectors = 88 limit=256 [ 124.447219][ T786] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 124.489401][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.526644][ T6920] syz.1.205: attempt to access beyond end of device [ 124.526644][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.536502][ T786] usb 3-1: config 0 descriptor?? [ 124.557021][ T6914] loop3: detected capacity change from 0 to 32768 [ 124.562772][ T6920] syz.1.205: attempt to access beyond end of device [ 124.562772][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.581694][ T6914] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.202 (6914) [ 124.596978][ T6920] syz.1.205: attempt to access beyond end of device [ 124.596978][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.624481][ T6914] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 124.643810][ T6914] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.663139][ T6914] BTRFS info (device loop3): using free space tree [ 124.671482][ T6920] syz.1.205: attempt to access beyond end of device [ 124.671482][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.706899][ T6920] syz.1.205: attempt to access beyond end of device [ 124.706899][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.722668][ T6920] syz.1.205: attempt to access beyond end of device [ 124.722668][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.741563][ T6920] syz.1.205: attempt to access beyond end of device [ 124.741563][ T6920] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 124.862125][ T6914] BTRFS info (device loop3): enabling ssd optimizations [ 124.884329][ T6914] BTRFS info (device loop3): auto enabling async discard [ 124.992172][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.009617][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.026599][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.044322][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.065471][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.106176][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.116468][ T786] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 125.163021][ T6914] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 125.185062][ T786] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 125.420539][ T5779] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 125.600784][ T5791] usb 3-1: USB disconnect, device number 8 [ 126.133730][ T6965] loop4: detected capacity change from 0 to 8192 [ 126.185782][ T6965] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.227376][ T6965] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 126.237448][ T6965] REISERFS (device loop4): using ordered data mode [ 126.243978][ T6965] reiserfs: using flush barriers [ 126.257138][ T6965] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.317681][ T6965] REISERFS (device loop4): checking transaction log (loop4) [ 126.360282][ T6965] REISERFS (device loop4): Using r5 hash to sort names [ 126.386754][ T6965] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 126.483874][ T6961] loop3: detected capacity change from 0 to 32768 [ 126.547289][ T6961] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 126.595449][ T6961] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.642736][ T6963] loop1: detected capacity change from 0 to 32768 [ 126.762839][ T6963] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 126.806591][ T6963] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 126.905737][ T6976] loop2: detected capacity change from 0 to 4096 [ 126.915179][ T6963] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 126.987637][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 127.003041][ T6978] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.160434][ T28] audit: type=1800 audit(1756251980.939:17): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 127.238989][ T6976] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 127.252815][ T6980] loop4: detected capacity change from 0 to 256 [ 127.260320][ T6980] exfat: Deprecated parameter 'utf8' [ 127.265669][ T6980] exfat: Deprecated parameter 'namecase' [ 127.285616][ T6976] Remounting filesystem read-only [ 127.322381][ T6980] exfat: Deprecated parameter 'namecase' [ 127.350787][ T6980] exfat: Deprecated parameter 'utf8' [ 127.374984][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 127.389501][ T6980] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 127.767958][ T6986] loop3: detected capacity change from 0 to 16 [ 127.775830][ T6986] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.856735][ T6986] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 127.884640][ T6991] loop1: detected capacity change from 0 to 128 [ 127.909622][ T6991] FAT-fs (loop1): Unrecognized mount option "iochaf8" or missing value [ 128.202144][ T7000] loop1: detected capacity change from 0 to 512 [ 128.219218][ T7000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.279920][ T7000] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.229: invalid indirect mapped block 4294967295 (level 0) [ 128.361953][ T7003] loop2: detected capacity change from 0 to 1024 [ 128.371766][ T7000] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.229: invalid indirect mapped block 4294967295 (level 1) [ 128.412908][ T7000] EXT4-fs (loop1): 1 orphan inode deleted [ 128.425401][ T7005] loop3: detected capacity change from 0 to 2048 [ 128.446303][ T7000] EXT4-fs (loop1): 1 truncate cleaned up [ 128.456231][ T5791] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.467546][ T7000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.487593][ T7005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.656472][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.665771][ T5791] usb 5-1: Using ep0 maxpacket: 32 [ 128.695298][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.730635][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.742609][ T5791] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 128.754307][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.772690][ T5791] usb 5-1: config 0 descriptor?? [ 128.817159][ T48] hfsplus: b-tree write err: -5, ino 4 [ 128.850151][ T7007] syzkaller1: entered promiscuous mode [ 128.866526][ T7007] syzkaller1: entered allmulticast mode [ 128.951639][ T7009] loop2: detected capacity change from 0 to 2048 [ 128.972616][ T7009] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.995643][ T7009] NILFS (loop2): mounting unchecked fs [ 129.026670][ T7009] NILFS (loop2): recovery complete [ 129.038745][ T7010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.252543][ T5791] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 129.380279][ T28] audit: type=1800 audit(1756251983.159:18): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.231" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 129.428705][ T5791] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 129.615030][ T7021] loop1: detected capacity change from 0 to 2048 [ 129.633700][ T5791] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 129.669177][ T7021] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.693394][ T7021] NILFS (loop1): mounting unchecked fs [ 129.696163][ T28] audit: type=1326 audit(1756251983.469:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 129.718854][ T6045] udevd[6045]: incorrect nilfs2 checksum on /dev/loop1 [ 129.743002][ T7021] NILFS (loop1): recovery complete [ 129.762407][ T7025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.833420][ T5791] ft260 0003:0403:6030.0008: failed to retrieve status: -71, no wakeup [ 129.878260][ T5791] ft260 0003:0403:6030.0008: failed to retrieve status: -71 [ 129.895918][ T28] audit: type=1326 audit(1756251983.469:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15358ebe9 code=0x7ffc0000 [ 129.896703][ T5791] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 129.956514][ T5791] usb 5-1: USB disconnect, device number 5 [ 130.014757][ T28] audit: type=1326 audit(1756251983.469:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 130.119641][ T28] audit: type=1326 audit(1756251983.469:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15358ebe9 code=0x7ffc0000 [ 130.183988][ T28] audit: type=1326 audit(1756251983.479:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 130.222626][ T28] audit: type=1326 audit(1756251983.479:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 130.304208][ T7028] loop1: detected capacity change from 0 to 128 [ 130.315490][ T28] audit: type=1326 audit(1756251983.479:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 130.357218][ T7028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.369507][ T28] audit: type=1326 audit(1756251983.479:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 130.404573][ T7028] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.413536][ T28] audit: type=1326 audit(1756251983.479:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff15352ade9 code=0x7ffc0000 [ 130.461677][ T7028] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.526648][ T7028] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.723307][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.770427][ T7037] loop3: detected capacity change from 0 to 128 [ 131.376454][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.383198][ T7035] loop4: detected capacity change from 0 to 32768 [ 131.469840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 131.529153][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 131.552923][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 131.572980][ T7049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.588345][ T787] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.600266][ T787] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.610645][ T787] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.621183][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.633081][ T7046] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.649507][ T787] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 131.784853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 131.794447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 131.818682][ T7039] loop2: detected capacity change from 0 to 40427 [ 131.825704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.845356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 131.854702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 131.890551][ T787] usb 4-1: USB disconnect, device number 7 [ 131.914345][ T7039] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 131.952715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 131.979489][ T7039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.058987][ T7039] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 132.086349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.106410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.116662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 132.186720][ T7039] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 132.265872][ T7039] F2FS-fs (loop2): invalid crc value [ 132.361274][ T7039] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.514827][ T7039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.565918][ T7039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.824802][ T5782] bio_check_eod: 2288 callbacks suppressed [ 132.824818][ T5782] syz-executor: attempt to access beyond end of device [ 132.824818][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.845930][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.043812][ T7068] loop3: detected capacity change from 0 to 128 [ 133.063059][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.069573][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.180196][ T7070] loop1: detected capacity change from 0 to 256 [ 133.289038][ T7070] FAT-fs (loop1): Directory bread(block 64) failed [ 133.314555][ T7070] FAT-fs (loop1): Directory bread(block 65) failed [ 133.338035][ T7070] FAT-fs (loop1): Directory bread(block 66) failed [ 133.344612][ T7070] FAT-fs (loop1): Directory bread(block 67) failed [ 133.380126][ T7070] FAT-fs (loop1): Directory bread(block 68) failed [ 133.388149][ T7070] FAT-fs (loop1): Directory bread(block 69) failed [ 133.396046][ T7070] FAT-fs (loop1): Directory bread(block 70) failed [ 133.412256][ T7074] loop2: detected capacity change from 0 to 256 [ 133.418789][ T7070] FAT-fs (loop1): Directory bread(block 71) failed [ 133.425760][ T7070] FAT-fs (loop1): Directory bread(block 72) failed [ 133.446451][ T7070] FAT-fs (loop1): Directory bread(block 73) failed [ 133.487238][ T7074] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 133.509040][ T7074] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 133.631502][ T7074] syz.2.253: attempt to access beyond end of device [ 133.631502][ T7074] loop2: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 133.657148][ T7074] syz.2.253: attempt to access beyond end of device [ 133.657148][ T7074] loop2: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 133.678676][ T7074] syz.2.253: attempt to access beyond end of device [ 133.678676][ T7074] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 133.730505][ T7074] syz.2.253: attempt to access beyond end of device [ 133.730505][ T7074] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 133.744202][ T7081] syz.2.253: attempt to access beyond end of device [ 133.744202][ T7081] loop2: rw=34817, sector=184, nr_sectors = 88 limit=256 [ 133.744383][ T7074] syz.2.253: attempt to access beyond end of device [ 133.744383][ T7074] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 133.781888][ T7074] syz.2.253: attempt to access beyond end of device [ 133.781888][ T7074] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 133.795726][ T7074] syz.2.253: attempt to access beyond end of device [ 133.795726][ T7074] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 133.810307][ T7074] syz.2.253: attempt to access beyond end of device [ 133.810307][ T7074] loop2: rw=0, sector=440, nr_sectors = 8 limit=256 [ 133.924806][ T7085] netlink: 156 bytes leftover after parsing attributes in process `syz.1.260'. [ 134.286235][ T5791] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.332514][ T7083] loop4: detected capacity change from 0 to 32768 [ 134.378799][ T7083] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.476182][ T5791] usb 4-1: Using ep0 maxpacket: 32 [ 134.483717][ T5791] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 134.484222][ T7083] XFS (loop4): Ending clean mount [ 134.493715][ T5791] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 134.518096][ T5791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 134.531836][ T5791] usb 4-1: config 1 has no interface number 0 [ 134.545570][ T5791] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.563456][ T7083] XFS (loop4): Quotacheck needed: Please wait. [ 134.601041][ T5791] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 134.639257][ T5791] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 134.651970][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.661607][ T7083] XFS (loop4): Quotacheck: Done. [ 134.677890][ T7100] netlink: 256 bytes leftover after parsing attributes in process `syz.1.264'. [ 134.695805][ T5791] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 134.704309][ T7100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.264'. [ 134.751869][ T7100] syz.1.264 (7100) used greatest stack depth: 17960 bytes left [ 134.873866][ T6048] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.906319][ T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 134.915242][ T5791] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 135.106316][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 135.115117][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.122306][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.126542][ T786] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.152333][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.163394][ T786] usb 3-1: config 0 descriptor?? [ 135.326211][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 135.333248][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.344604][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.354694][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.367836][ T787] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.377163][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.389634][ T9] usb 4-1: USB disconnect, device number 8 [ 135.398141][ T786] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.411666][ T787] usb 2-1: config 0 descriptor?? [ 135.418232][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 135.625315][ T786] usb 3-1: USB disconnect, device number 9 [ 135.853049][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.860504][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.867869][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.875117][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.882461][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.889744][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.897132][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.904428][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.911997][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.920858][ T787] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 135.935166][ T787] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input7 [ 135.994264][ T7108] loop3: detected capacity change from 0 to 64 [ 136.080741][ T787] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 136.149765][ T787] usb 2-1: USB disconnect, device number 6 [ 136.340641][ T7110] fido_id[7110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.575993][ T7117] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 136.598648][ T7117] macvtap1: entered promiscuous mode [ 136.617539][ T7117] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 137.024488][ T7112] loop2: detected capacity change from 0 to 40427 [ 137.056524][ T7112] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384) [ 137.083243][ T7112] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.115950][ T7112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.240696][ T7112] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.261389][ T7112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.266549][ T5870] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 137.309044][ T7136] netlink: 256 bytes leftover after parsing attributes in process `syz.1.275'. [ 137.325969][ T7136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.275'. [ 137.424245][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 137.476026][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.492245][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 137.513538][ T5870] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 137.534906][ T5870] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 137.590933][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.600417][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.621375][ T5870] usb 5-1: Product: syz [ 137.636279][ T5870] usb 5-1: Manufacturer: syz [ 137.640925][ T5870] usb 5-1: SerialNumber: syz [ 137.662092][ T7128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.904229][ T7128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.382546][ T7156] loop3: detected capacity change from 0 to 256 [ 138.432970][ T7156] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 138.533943][ T7128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.650134][ T7156] loop3: detected capacity change from 0 to 4096 [ 138.763406][ T5870] cdc_ncm 5-1:1.0: bind() failure [ 138.788107][ T5870] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 138.814891][ T5870] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 138.853490][ T5870] usbtest: probe of 5-1:1.1 failed with error -71 [ 138.898887][ T5870] usb 5-1: USB disconnect, device number 6 [ 138.936575][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 139.209042][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 139.482928][ T50] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 139.626246][ T5791] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.793126][ T7201] loop2: detected capacity change from 0 to 4096 [ 139.818172][ T5791] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.839607][ T5791] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.860246][ T5791] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.883024][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.894988][ T7183] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.916374][ T5791] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 140.192831][ T5833] usb 2-1: USB disconnect, device number 7 [ 140.314856][ T7203] loop4: detected capacity change from 0 to 32768 [ 140.330608][ T7203] (syz.4.298,7203,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.346828][ T7203] (syz.4.298,7203,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.382752][ T7203] JBD2: Ignoring recovery information on journal [ 140.416289][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.468775][ T7203] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.618581][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 140.639164][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.661253][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.684470][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.700024][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.710597][ T5870] usb 4-1: Product: syz [ 140.714949][ T5870] usb 4-1: Manufacturer: syz [ 140.724815][ T5870] usb 4-1: SerialNumber: syz [ 140.754014][ T7203] syz.4.298 (7203) used greatest stack depth: 17680 bytes left [ 140.819799][ T6048] ocfs2: Unmounting device (7,4) on (node local) [ 140.894661][ T7212] loop2: detected capacity change from 0 to 32768 [ 140.932418][ T7212] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.967232][ T5870] usb 4-1: 0:2 : does not exist [ 140.987023][ T5870] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 141.056751][ T5870] usb 4-1: USB disconnect, device number 9 [ 141.092941][ T6219] udevd[6219]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.222444][ T7212] XFS (loop2): Ending clean mount [ 141.241312][ T7212] XFS (loop2): Quotacheck needed: Please wait. [ 141.316619][ T7212] XFS (loop2): Quotacheck: Done. [ 141.423715][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.902359][ T7234] loop2: detected capacity change from 0 to 2048 [ 141.962725][ T7234] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.983282][ T7225] loop4: detected capacity change from 0 to 32768 [ 142.004869][ T7234] NILFS (loop2): mounting unchecked fs [ 142.024280][ T7225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.302 (7225) [ 142.040968][ T7052] udevd[7052]: incorrect nilfs2 checksum on /dev/loop2 [ 142.053331][ T7234] NILFS (loop2): recovery complete [ 142.079573][ T7239] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.100791][ T7225] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.161113][ T7225] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 142.183876][ T7225] BTRFS info (device loop4): force clearing of disk cache [ 142.192181][ T7225] BTRFS info (device loop4): turning on sync discard [ 142.199335][ T7225] BTRFS info (device loop4): enabling auto defrag [ 142.202686][ T7242] loop3: detected capacity change from 0 to 128 [ 142.205961][ T7225] BTRFS info (device loop4): max_inline at 0 [ 142.234638][ T7242] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.244074][ T7225] BTRFS info (device loop4): enabling disk space caching [ 142.265177][ T7225] BTRFS info (device loop4): disk space caching is enabled [ 142.319514][ T7244] syzkaller1: entered promiscuous mode [ 142.338643][ T7244] syzkaller1: entered allmulticast mode [ 142.391110][ T7225] BTRFS info (device loop4): enabling ssd optimizations [ 142.414463][ T7225] BTRFS info (device loop4): rebuilding free space tree [ 142.485108][ T7225] BTRFS info (device loop4): disabling free space tree [ 142.510185][ T7225] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.531149][ T7225] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.007616][ T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 143.050752][ T7273] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.103719][ T7267] netlink: 256 bytes leftover after parsing attributes in process `syz.1.312'. [ 143.112995][ T6048] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.188489][ T7267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.312'. [ 143.506269][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.549962][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 143.558828][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 143.570349][ T5783] Bluetooth: hci2: hardware error 0x00 [ 143.716341][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 143.756858][ T786] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 143.786479][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.815133][ T786] usb 3-1: config 0 descriptor?? [ 143.839183][ T786] gspca_main: sq930x-2.14.0 probing 041e:403c [ 144.022060][ T7290] warning: `syz.4.321' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.089931][ T7277] loop3: detected capacity change from 0 to 40427 [ 144.102685][ T7277] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 144.133069][ T7277] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.157701][ T7277] F2FS-fs (loop3): build fault injection attr: rate: 18446, type: 0x7ffff [ 144.204379][ T7277] F2FS-fs (loop3): invalid crc value [ 144.222958][ T7277] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.237142][ T7293] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.348603][ T7277] F2FS-fs (loop3): Start checkpoint disabled! [ 144.367002][ T7277] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.374342][ T7277] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 144.421834][ T7299] binder: 7298:7299 ioctl 4018620d 0 returned -22 [ 144.581995][ T3458] bio_check_eod: 3777 callbacks suppressed [ 144.582010][ T3458] kworker/u4:8: attempt to access beyond end of device [ 144.582010][ T3458] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.606989][ T3458] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.619589][ T3458] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.850748][ T786] gspca_sq930x: ucbus_write failed -71 [ 144.863574][ T786] sq930x: probe of 3-1:0.0 failed with error -71 [ 144.883875][ T786] usb 3-1: USB disconnect, device number 10 [ 144.982444][ T7307] netlink: 256 bytes leftover after parsing attributes in process `syz.3.326'. [ 144.992036][ T7307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.326'. [ 145.055906][ T7309] syzkaller1: entered promiscuous mode [ 145.065007][ T7309] syzkaller1: entered allmulticast mode [ 145.066516][ T5791] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.153850][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.163202][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.170856][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.178742][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.191964][ T786] rtc rtc0: __rtc_set_alarm: err=-22 [ 145.266244][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 145.306258][ T5791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.332413][ T5791] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 145.344506][ T5791] usb 2-1: config 4 has no interface number 0 [ 145.355493][ T5791] usb 2-1: config 4 interface 30 has no altsetting 0 [ 145.366253][ T5791] usb 2-1: string descriptor 0 read error: -22 [ 145.372613][ T5791] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 145.389316][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.434564][ T5791] dw2102: su3000_identify_state [ 145.445251][ T5791] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 145.454847][ T5791] dw2102: su3000_power_ctrl: 1, initialized 0 [ 145.456346][ T7316] block nbd3: not configured, cannot reconfigure [ 145.464092][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 145.490626][ T5791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.531127][ T5791] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 145.577184][ T5791] usb 2-1: media controller created [ 145.583325][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 145.604892][ T5791] dw2102: i2c transfer failed. [ 145.611738][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 145.630599][ T5791] dw2102: i2c transfer failed. [ 145.647438][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 145.684031][ T5791] dw2102: i2c transfer failed. [ 145.693505][ T7305] dvb-usb: bulk message failed: -22 (3/0) [ 145.699821][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 145.711505][ T7318] loop2: detected capacity change from 0 to 4096 [ 145.728291][ T7305] dw2102: i2c transfer failed. [ 145.733412][ T7305] dvb-usb: bulk message failed: -22 (3/0) [ 145.739613][ T7305] dw2102: i2c transfer failed. [ 145.748556][ T7318] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 145.764993][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 145.819869][ T5791] dw2102: i2c transfer failed. [ 145.853134][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 145.860025][ T7318] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 145.865059][ T5791] dw2102: i2c transfer failed. [ 145.874140][ T5791] dvb-usb: bulk message failed: -22 (6/0) [ 145.886124][ T5791] dw2102: i2c transfer failed. [ 145.890936][ T5791] dvb-usb: MAC address: 02:02:02:02:02:02 [ 145.960860][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.990266][ T5791] dvb-usb: bulk message failed: -22 (3/0) [ 146.004573][ T5791] dw2102: command 0x0e transfer failed. [ 146.019099][ T5791] dvb-usb: bulk message failed: -22 (3/0) [ 146.028537][ T5791] dw2102: command 0x0e transfer failed. [ 146.172009][ T7327] netlink: 256 bytes leftover after parsing attributes in process `syz.3.336'. [ 146.181967][ T7327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.336'. [ 146.346405][ T5791] dvb-usb: bulk message failed: -22 (3/0) [ 146.361078][ T5791] dw2102: command 0x0e transfer failed. [ 146.368116][ T5791] dvb-usb: bulk message failed: -22 (3/0) [ 146.383957][ T5791] dw2102: command 0x0e transfer failed. [ 146.394468][ T5791] dvb-usb: bulk message failed: -22 (1/0) [ 146.405874][ T5791] dw2102: command 0x51 transfer failed. [ 146.420051][ T5791] dvb-usb: bulk message failed: -22 (5/0) [ 146.431605][ T7336] loop1: detected capacity change from 0 to 2048 [ 146.438850][ T5791] dw2102: i2c probe for address 0x68 failed. [ 146.454519][ T5791] dvb-usb: bulk message failed: -22 (5/0) [ 146.473761][ T5791] dw2102: i2c probe for address 0x69 failed. [ 146.495209][ T7337] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.517252][ T5791] dvb-usb: bulk message failed: -22 (5/0) [ 146.546194][ T5791] dw2102: i2c probe for address 0x6a failed. [ 146.563854][ T5791] dw2102: probing for demodulator failed. Is the external power switched on? [ 146.604600][ T5791] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 146.612377][ T7337] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 146.636340][ T7337] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 146.685856][ T7337] Remounting filesystem read-only [ 146.804705][ T5780] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 146.815162][ T7347] loop4: detected capacity change from 0 to 4096 [ 146.826820][ T5791] rc_core: IR keymap rc-tt-1500 not found [ 146.836416][ T5791] Registered IR keymap rc-empty [ 146.842242][ T5791] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 146.851759][ T5780] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 146.868837][ T5780] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 146.903974][ T7347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.907768][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.939189][ T5791] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 147.004671][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.032429][ T5791] dvb-usb: schedule remote query interval to 250 msecs. [ 147.051593][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.066850][ T5791] dw2102: su3000_power_ctrl: 0, initialized 1 [ 147.086191][ T5791] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 147.095095][ T5780] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 147.129467][ T5780] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 147.147364][ T5791] usb 2-1: USB disconnect, device number 8 [ 147.163869][ T5780] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 147.181294][ T6048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.196231][ T5780] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 147.214683][ T5780] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 147.244036][ T5780] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 147.260687][ T5780] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 147.272895][ T5791] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 147.287639][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.311057][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.329408][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.338997][ T5780] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 147.352350][ T5780] NILFS (loop1): discard dirty page: offset=0, ino=19 [ 147.361970][ T5780] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 147.373544][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.380850][ T7356] netlink: 256 bytes leftover after parsing attributes in process `syz.3.347'. [ 147.385350][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.402096][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.418016][ T7356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.347'. [ 147.443106][ T5780] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 147.450950][ T5780] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 147.460432][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.472263][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.487203][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.530043][ T5780] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 147.561316][ T5780] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 147.587154][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.650455][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.686872][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.686942][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 147.716581][ T5780] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 147.723316][ T5780] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 147.775101][ T5780] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 147.784395][ T50] Bluetooth: hci1: command tx timeout [ 147.819745][ T5780] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 147.850166][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.869942][ T5780] NILFS (loop1): discard dirty page: offset=98304, ino=3 [ 147.888571][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.900397][ T7372] loop2: detected capacity change from 0 to 256 [ 147.918252][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.943102][ T5780] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 147.963102][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.989287][ T5780] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 148.011024][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.036260][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.055746][ T5780] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 148.099513][ T5780] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.428678][ T7366] loop3: detected capacity change from 0 to 32768 [ 148.484596][ T7366] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 148.580242][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 148.702195][ T7378] loop2: detected capacity change from 0 to 32768 [ 148.712851][ T7375] loop4: detected capacity change from 0 to 32768 [ 148.717438][ T7378] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.355 (7378) [ 148.810176][ T7375] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.829579][ T7378] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 148.859137][ T7378] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 148.912633][ T7378] BTRFS info (device loop2): using free space tree [ 148.942393][ T7375] XFS (loop4): Ending clean mount [ 148.992190][ T7375] XFS (loop4): Quotacheck needed: Please wait. [ 149.128552][ T7378] BTRFS info (device loop2): enabling ssd optimizations [ 149.153696][ T7375] XFS (loop4): Quotacheck: Done. [ 149.157814][ T7378] BTRFS info (device loop2): auto enabling async discard [ 149.188497][ T7375] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.341381][ T7410] loop1: detected capacity change from 0 to 1024 [ 149.387159][ T7410] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.466516][ T7410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.514004][ T7410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.670330][ T5782] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 149.677110][ T7387] loop3: detected capacity change from 0 to 32768 [ 149.717338][ T7410] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.1.357: corrupted in-inode xattr: bad e_name length [ 149.737584][ T7410] EXT4-fs (loop1): Remounting filesystem read-only [ 149.745166][ T7410] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 149.830603][ T7387] JBD2: Ignoring recovery information on journal [ 149.985848][ T7387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.035246][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.543179][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 151.364743][ T7442] loop3: detected capacity change from 0 to 2048 [ 151.445408][ T7442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.462401][ T7450] loop4: detected capacity change from 0 to 128 [ 151.507715][ T7452] sctp: [Deprecated]: syz.1.371 (pid 7452) Use of int in maxseg socket option. [ 151.507715][ T7452] Use struct sctp_assoc_value instead [ 151.515132][ T7446] syzkaller1: entered promiscuous mode [ 151.588698][ T7446] syzkaller1: entered allmulticast mode [ 151.632528][ T7442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 151.672458][ T7442] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 151.692228][ T7442] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.692228][ T7442] [ 151.702237][ T7442] EXT4-fs (loop3): Total free blocks count 0 [ 151.708375][ T7442] EXT4-fs (loop3): Free/Dirty block details [ 151.714289][ T7442] EXT4-fs (loop3): free_blocks=4096 [ 151.733948][ T7442] EXT4-fs (loop3): dirty_blocks=48 [ 151.765871][ T7442] EXT4-fs (loop3): Block reservation details [ 151.816218][ T7442] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 151.932937][ T7442] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 152.062039][ T7465] netlink: 'syz.4.377': attribute type 29 has an invalid length. [ 152.084925][ T7461] netlink: 256 bytes leftover after parsing attributes in process `syz.1.375'. [ 152.087603][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 152.114051][ T7461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.375'. [ 152.903164][ T7494] loop4: detected capacity change from 0 to 8192 [ 152.946760][ T7499] netlink: 256 bytes leftover after parsing attributes in process `syz.2.389'. [ 152.960704][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.389'. [ 152.972628][ T7494] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.007774][ T7494] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 153.018860][ T7494] REISERFS (device loop4): using ordered data mode [ 153.026521][ T7494] reiserfs: using flush barriers [ 153.034124][ T7494] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.051326][ T7494] REISERFS (device loop4): checking transaction log (loop4) [ 153.070466][ T7494] REISERFS (device loop4): Using r5 hash to sort names [ 153.086712][ T7494] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 153.626502][ T7512] netlink: 'syz.2.398': attribute type 12 has an invalid length. [ 153.652768][ T7512] netlink: 'syz.2.398': attribute type 29 has an invalid length. [ 153.680239][ T7512] netlink: 148 bytes leftover after parsing attributes in process `syz.2.398'. [ 153.704198][ T7512] netlink: 'syz.2.398': attribute type 2 has an invalid length. [ 153.731782][ T7512] netlink: 'syz.2.398': attribute type 3 has an invalid length. [ 154.260610][ T7527] loop2: detected capacity change from 0 to 512 [ 154.330707][ T7527] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #12: comm syz.2.405: corrupted in-inode xattr: invalid ea_ino [ 154.396382][ T7527] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.405: couldn't read orphan inode 12 (err -117) [ 154.448107][ T7527] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.482838][ T7524] netlink: 256 bytes leftover after parsing attributes in process `syz.4.403'. [ 154.511414][ T7524] netlink: 48 bytes leftover after parsing attributes in process `syz.4.403'. [ 154.511785][ T7527] EXT4-fs (loop2): shut down requested (1) [ 154.687939][ T5782] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 155.042905][ T7544] netlink: 256 bytes leftover after parsing attributes in process `syz.1.410'. [ 155.055636][ T7544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.410'. [ 155.294693][ T7534] loop4: detected capacity change from 0 to 32768 [ 155.359828][ T7534] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.373740][ T7536] loop3: detected capacity change from 0 to 32768 [ 155.407598][ T7536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.406 (7536) [ 155.417723][ T7534] XFS (loop4): Ending clean mount [ 155.437398][ T7534] XFS (loop4): Quotacheck needed: Please wait. [ 155.462453][ T7536] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.491370][ T7536] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 155.540365][ T7536] BTRFS info (device loop3): metadata ratio 2 [ 155.566827][ T7536] BTRFS info (device loop3): allowing degraded mounts [ 155.573664][ T7536] BTRFS info (device loop3): force zlib compression, level 3 [ 155.575437][ T7534] XFS (loop4): Quotacheck: Done. [ 155.614761][ T7536] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.660542][ T7534] XFS (loop4): User initiated shutdown received. [ 155.660777][ T7536] BTRFS info (device loop3): use zstd compression, level 3 [ 155.712077][ T7536] BTRFS info (device loop3): force clearing of disk cache [ 155.724344][ T7534] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 155.749103][ T7536] BTRFS info (device loop3): max_inline at 0 [ 155.755151][ T7536] BTRFS info (device loop3): using free space tree [ 155.763284][ T7534] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 155.825167][ T7547] loop1: detected capacity change from 0 to 32768 [ 155.855120][ T7547] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.411 (7547) [ 155.923291][ T6048] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.942343][ T7547] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.964784][ T7547] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 155.973945][ T7547] BTRFS info (device loop1): force clearing of disk cache [ 155.981528][ T7547] BTRFS info (device loop1): turning on sync discard [ 155.988884][ T7547] BTRFS info (device loop1): enabling auto defrag [ 155.993530][ T7536] BTRFS info (device loop3): enabling ssd optimizations [ 155.995810][ T7547] BTRFS info (device loop1): max_inline at 0 [ 156.008765][ T7547] BTRFS info (device loop1): enabling disk space caching [ 156.015821][ T7547] BTRFS info (device loop1): disk space caching is enabled [ 156.031301][ T7536] BTRFS info (device loop3): rebuilding free space tree [ 156.276235][ T7547] BTRFS info (device loop1): enabling ssd optimizations [ 156.302104][ T7547] BTRFS info (device loop1): rebuilding free space tree [ 156.403362][ T7547] BTRFS info (device loop1): disabling free space tree [ 156.411802][ T7547] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.450803][ T7547] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.674196][ T5779] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.797106][ T1319] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 157.046666][ T5780] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.271655][ T7605] loop4: detected capacity change from 0 to 8192 [ 157.302139][ T7605] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.316581][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 157.339433][ T7605] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 157.350086][ T7605] REISERFS (device loop4): using ordered data mode [ 157.357424][ T7605] reiserfs: using flush barriers [ 157.376021][ T7605] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.393821][ T7605] REISERFS (device loop4): checking transaction log (loop4) [ 157.401194][ T7590] loop2: detected capacity change from 0 to 32768 [ 157.423770][ T7605] REISERFS (device loop4): Using r5 hash to sort names [ 157.436889][ T7605] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 157.512631][ T7590] [ 157.512631][ T7590] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.512631][ T7590] [ 157.529268][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 157.560407][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.596445][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.656181][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.698739][ T27] usb 4-1: config 0 descriptor?? [ 157.727839][ T5782] [ 157.727839][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.727839][ T5782] [ 157.779200][ T5782] [ 157.779200][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.779200][ T5782] [ 157.928277][ T27] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.098385][ T7615] syz.2.418[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.098519][ T7615] syz.2.418[7615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.456228][ T5871] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 158.517568][ T7628] netlink: 256 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.526757][ T7628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.668548][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.696242][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.716527][ T5871] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 158.734690][ T7630] netlink: 256 bytes leftover after parsing attributes in process `syz.1.426'. [ 158.746787][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.757285][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.426'. [ 158.777278][ T5871] usb 5-1: config 0 descriptor?? [ 158.863086][ T7626] loop2: detected capacity change from 0 to 32768 [ 158.871686][ T7626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.424 (7626) [ 158.890778][ T5791] usb 4-1: USB disconnect, device number 10 [ 158.928103][ T7626] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.978009][ T7626] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 158.990809][ T7626] BTRFS info (device loop2): enabling auto defrag [ 158.998817][ T7626] BTRFS info (device loop2): doing ref verification [ 159.005563][ T7626] BTRFS info (device loop2): max_inline at 0 [ 159.011669][ T7626] BTRFS info (device loop2): force clearing of disk cache [ 159.020418][ T7626] BTRFS info (device loop2): turning on sync discard [ 159.028451][ T7626] BTRFS info (device loop2): using free space tree [ 159.105195][ T7626] BTRFS info (device loop2): enabling ssd optimizations [ 159.133968][ T7626] BTRFS info (device loop2): rebuilding free space tree [ 159.216855][ T5871] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 159.478511][ T9] usb 5-1: USB disconnect, device number 7 [ 159.493822][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.533359][ T7634] loop1: detected capacity change from 0 to 32768 [ 159.545146][ T7634] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.427 (7634) [ 159.589564][ T7634] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 159.641109][ T7634] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 159.664804][ T7634] BTRFS info (device loop1): using free space tree [ 159.802800][ T7657] netlink: 256 bytes leftover after parsing attributes in process `syz.3.430'. [ 159.812672][ T7657] netlink: 48 bytes leftover after parsing attributes in process `syz.3.430'. [ 159.883758][ T7634] BTRFS info (device loop1): enabling ssd optimizations [ 159.911380][ T7634] BTRFS info (device loop1): auto enabling async discard [ 160.364980][ T5780] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 160.549212][ T7686] netlink: 256 bytes leftover after parsing attributes in process `syz.4.434'. [ 160.583008][ T7686] netlink: 48 bytes leftover after parsing attributes in process `syz.4.434'. [ 161.477310][ T5871] IPVS: starting estimator thread 0... [ 161.576612][ T7717] IPVS: using max 17 ests per chain, 40800 per kthread [ 161.669078][ T7706] loop2: detected capacity change from 0 to 32768 [ 161.727692][ T7706] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.787817][ T28] kauditd_printk_skb: 242 callbacks suppressed [ 161.787832][ T28] audit: type=1800 audit(1756252015.569:270): pid=7706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.441" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 162.001208][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 162.193148][ T7728] loop3: detected capacity change from 0 to 32768 [ 162.201531][ T7728] XFS: ikeep mount option is deprecated. [ 162.290430][ T7728] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.550484][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 162.624696][ T7728] XFS (loop3): Ending clean mount [ 162.634798][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 162.645264][ T7728] XFS (loop3): Quotacheck needed: Please wait. [ 162.692686][ T5870] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 162.763458][ T7728] XFS (loop3): Quotacheck: Done. [ 162.823576][ T5870] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.709515][ T5779] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.045618][ T7750] hid-generic 0000:0000:0000.000B: pid 7750 passed too short report [ 164.706306][ T9] IPVS: starting estimator thread 0... [ 164.714326][ T7779] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.816359][ T7781] IPVS: using max 19 ests per chain, 45600 per kthread [ 164.995742][ T7785] loop4: detected capacity change from 0 to 64 [ 165.133860][ T7774] loop1: detected capacity change from 0 to 32768 [ 165.141121][ T7777] loop2: detected capacity change from 0 to 32768 [ 165.160768][ T7774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.459 (7774) [ 165.204398][ T7774] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.213556][ T7777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.461 (7777) [ 165.243542][ T7774] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.278189][ T7777] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.303512][ T7774] BTRFS info (device loop1): using free space tree [ 165.334646][ T7777] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 165.358621][ T7777] BTRFS info (device loop2): metadata ratio 2 [ 165.364764][ T7777] BTRFS info (device loop2): allowing degraded mounts [ 165.428041][ T7777] BTRFS info (device loop2): force zlib compression, level 3 [ 165.455125][ T7777] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 165.493837][ T7777] BTRFS info (device loop2): use zstd compression, level 3 [ 165.513405][ T7774] BTRFS info (device loop1): enabling ssd optimizations [ 165.526457][ T7774] BTRFS info (device loop1): auto enabling async discard [ 165.553791][ T7777] BTRFS info (device loop2): force clearing of disk cache [ 165.588930][ T7777] BTRFS info (device loop2): max_inline at 0 [ 165.626632][ T7777] BTRFS info (device loop2): using free space tree [ 165.846178][ T7777] BTRFS info (device loop2): enabling ssd optimizations [ 165.889378][ T7777] BTRFS info (device loop2): rebuilding free space tree [ 165.957005][ T7783] loop3: detected capacity change from 0 to 32768 [ 166.002131][ T7783] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.027368][ T7783] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.058032][ T28] audit: type=1800 audit(1756252019.809:271): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.461" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 166.149132][ T7783] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 166.261562][ T5782] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.295835][ T7783] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 166.546706][ T5780] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.683703][ T7828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.761305][ T7828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.770910][ T7836] __nla_validate_parse: 2 callbacks suppressed [ 166.770926][ T7836] netlink: 256 bytes leftover after parsing attributes in process `syz.2.468'. [ 166.792261][ T7836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.468'. [ 166.889125][ T7828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 166.937712][ T7828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.943790][ T7828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 166.992581][ T7828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.041440][ T7828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.052752][ T7828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.083713][ T7828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.179101][ T7052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (7052) [ 167.457283][ T7851] input: syz0 as /devices/virtual/input/input9 [ 167.476275][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.686210][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 167.693830][ T7843] loop3: detected capacity change from 0 to 32768 [ 167.698643][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.716311][ T7843] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.472 (7843) [ 167.729610][ T5871] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.740349][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.751468][ T7854] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.761758][ T7843] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 167.793281][ T5871] usb 3-1: config 0 descriptor?? [ 167.799842][ T7843] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 167.831785][ T7843] BTRFS info (device loop3): using free space tree [ 167.998949][ T7843] BTRFS info (device loop3): enabling ssd optimizations [ 168.021788][ T7843] BTRFS info (device loop3): auto enabling async discard [ 168.060571][ T5871] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.128385][ T7877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.136451][ T7877] IPv6: NLM_F_CREATE should be set when creating new route [ 168.143698][ T7877] IPv6: NLM_F_CREATE should be set when creating new route [ 168.176267][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.238700][ T5871] usb 3-1: USB disconnect, device number 11 [ 168.371193][ T7883] loop2: detected capacity change from 0 to 7 [ 168.384188][ T7052] Dev loop2: unable to read RDB block 7 [ 168.391867][ T7052] loop2: AHDI p1 p2 p3 [ 168.399748][ T7052] loop2: partition table partially beyond EOD, truncated [ 168.409875][ T7052] loop2: p1 start 1601398130 is beyond EOD, truncated [ 168.413763][ T5779] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 168.438052][ T7052] loop2: p2 start 1702059890 is beyond EOD, truncated [ 168.458970][ T7883] Dev loop2: unable to read RDB block 7 [ 168.464626][ T7883] loop2: AHDI p1 p2 p3 [ 168.483318][ T7883] loop2: partition table partially beyond EOD, truncated [ 168.495617][ T7883] loop2: p1 start 1601398130 is beyond EOD, truncated [ 168.512229][ T7883] loop2: p2 start 1702059890 is beyond EOD, truncated [ 168.866587][ T7894] capability: warning: `syz.3.484' uses deprecated v2 capabilities in a way that may be insecure [ 168.986380][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.056378][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.276283][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 169.399819][ T7910] loop3: detected capacity change from 0 to 2048 [ 169.409704][ T7906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.488'. [ 169.476263][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 169.501708][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.488'. [ 169.579861][ T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.621176][ T7910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.646805][ T7912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.704232][ T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.748888][ T7910] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.782674][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.865958][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.941382][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 169.994975][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.024227][ T9] usb 3-1: Product: syz [ 170.032640][ T9] usb 3-1: Manufacturer: syz [ 170.034463][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.041817][ T9] usb 3-1: SerialNumber: syz [ 170.258470][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.289000][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 170.508998][ T7929] loop3: detected capacity change from 0 to 256 [ 170.607226][ T7929] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.653089][ T7929] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 170.715742][ T7929] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 171.066358][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.146502][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.223684][ T786] usb 3-1: USB disconnect, device number 12 [ 171.245823][ T786] usblp0: removed [ 171.620327][ T7957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 171.987122][ T7966] loop3: detected capacity change from 0 to 128 [ 172.017958][ T7966] EXT4-fs (loop3): Test dummy encryption mode enabled [ 172.059789][ T7967] netlink: 256 bytes leftover after parsing attributes in process `syz.1.510'. [ 172.089004][ T7966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.122563][ T7967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.510'. [ 172.159808][ T7971] loop4: detected capacity change from 0 to 512 [ 172.177105][ T7966] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.197418][ T7971] EXT4-fs: Ignoring removed oldalloc option [ 172.248647][ T7971] EXT4-fs (loop4): 1 truncate cleaned up [ 172.264872][ T7971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.337632][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.566459][ T7966] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 172.571789][ T7983] netlink: 256 bytes leftover after parsing attributes in process `syz.2.513'. [ 172.614719][ T6048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.633061][ T7983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.513'. [ 172.693914][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.126163][ T786] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.136223][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.182974][ T7985] loop1: detected capacity change from 0 to 32768 [ 173.213334][ T7985] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 173.221535][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.262589][ T7985] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.306196][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 173.313366][ T786] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 173.332096][ T786] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.352134][ T786] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.373032][ T7985] XFS (loop1): Ending clean mount [ 173.378306][ T786] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.378336][ T786] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.378377][ T786] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.378397][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.441749][ T7985] XFS (loop1): Quotacheck needed: Please wait. [ 173.540900][ T7985] XFS (loop1): Quotacheck: Done. [ 173.631979][ T786] usb 4-1: usb_control_msg returned -32 [ 173.646451][ T786] usbtmc 4-1:16.0: can't read capabilities [ 173.676356][ T7989] loop4: detected capacity change from 0 to 40427 [ 173.729513][ T7989] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 173.768188][ T7989] F2FS-fs (loop4): invalid crc value [ 173.794501][ T7989] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.869077][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.896195][ T7989] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.028940][ T6048] syz-executor: attempt to access beyond end of device [ 174.028940][ T6048] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.056003][ T8007] usbtmc 4-1:16.0: usb_bulk_msg returned -71 [ 174.093159][ T6048] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 174.234765][ T8003] loop2: detected capacity change from 0 to 32768 [ 174.245667][ T786] usb 4-1: USB disconnect, device number 11 [ 174.270734][ T8003] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.519 (8003) [ 174.375080][ T8009] capability: warning: `syz.1.520' uses 32-bit capabilities (legacy support in use) [ 174.390360][ T8003] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.407692][ T8003] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 174.431575][ T8003] BTRFS info (device loop2): enabling auto defrag [ 174.438596][ T8009] program syz.1.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.456390][ T8003] BTRFS info (device loop2): doing ref verification [ 174.463330][ T8003] BTRFS info (device loop2): use no compression [ 174.490339][ T8003] BTRFS info (device loop2): force clearing of disk cache [ 174.575359][ T8003] BTRFS info (device loop2): max_inline at 4096 [ 174.603967][ T8003] BTRFS info (device loop2): disabling free space tree [ 174.678902][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 174.712599][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'. [ 174.817556][ T8027] loop3: detected capacity change from 0 to 1 [ 174.827257][ T8027] Dev loop3: unable to read RDB block 1 [ 174.833214][ T8027] loop3: unable to read partition table [ 174.842755][ T8027] loop3: partition table beyond EOD, truncated [ 174.856846][ T8027] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 174.896044][ T5156] Dev loop3: unable to read RDB block 1 [ 174.912367][ T5156] loop3: unable to read partition table [ 174.932923][ T5156] loop3: partition table beyond EOD, truncated [ 174.939662][ T8003] BTRFS info (device loop2): enabling ssd optimizations [ 175.004110][ T8003] BTRFS info (device loop2): auto enabling async discard [ 175.011664][ T8034] loop4: detected capacity change from 0 to 256 [ 175.031711][ T28] audit: type=1326 audit(1756252028.789:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.3.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60fd38ebe9 code=0x0 [ 175.075162][ T8034] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x50a6a7f9, utbl_chksum : 0xe619d30d) [ 175.118967][ T8003] BTRFS info (device loop2): rebuilding free space tree [ 175.277311][ T8003] BTRFS info (device loop2): disabling free space tree [ 175.284278][ T8003] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.376268][ T8003] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.870058][ T8052] loop3: detected capacity change from 0 to 256 [ 175.876990][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.883306][ T8052] exfat: Deprecated parameter 'namecase' [ 175.896268][ T786] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 175.933941][ T8052] exfat: Deprecated parameter 'utf8' [ 175.962903][ T8052] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 176.066280][ T5871] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.107240][ T786] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.126459][ T786] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.154258][ T786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.183386][ T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 176.206133][ T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 176.223549][ T786] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.256405][ T786] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.264449][ T786] usb 5-1: Product: syz [ 176.276157][ T786] usb 5-1: Manufacturer: syz [ 176.295159][ T786] cdc_wdm 5-1:1.0: skipping garbage [ 176.305314][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 176.317070][ T786] cdc_wdm 5-1:1.0: skipping garbage [ 176.327006][ T5871] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.346285][ T786] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 176.352308][ T5871] usb 2-1: config 0 has no interface number 0 [ 176.363738][ T786] cdc_wdm 5-1:1.0: Unknown control protocol [ 176.370505][ T5871] usb 2-1: config 0 interface 184 has no altsetting 0 [ 176.390543][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.416293][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.424337][ T5871] usb 2-1: Product: syz [ 176.461408][ T5871] usb 2-1: Manufacturer: syz [ 176.466402][ T5871] usb 2-1: SerialNumber: syz [ 176.483006][ T5871] usb 2-1: config 0 descriptor?? [ 176.500205][ T5871] smsc75xx v1.0.0 [ 176.631120][ T8059] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 176.646561][ T8059] binder: 8057:8059 ioctl 4018620d 2000000002c0 returned -1 [ 176.843817][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.075999][ T5791] usb 5-1: USB disconnect, device number 8 [ 177.135910][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 177.207092][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 177.237006][ T5871] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 177.257055][ T5871] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 177.332789][ T5871] usb 2-1: USB disconnect, device number 9 [ 177.913264][ T8072] kvm: apic: phys broadcast and lowest prio [ 178.396184][ T5871] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 178.598152][ T5871] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.630021][ T5871] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.655419][ T5871] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.665213][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.890820][ T5871] usb 4-1: usb_control_msg returned -32 [ 178.898219][ T5871] usbtmc 4-1:16.0: can't read capabilities [ 179.475924][ T5833] usb 4-1: USB disconnect, device number 12 [ 179.713777][ T8104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.028411][ T8103] loop2: detected capacity change from 0 to 32768 [ 180.093942][ T8103] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.552 (8103) [ 180.205843][ T8103] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.221819][ T8103] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 180.230762][ T8103] BTRFS info (device loop2): using free space tree [ 180.301356][ T8103] BTRFS info (device loop2): enabling ssd optimizations [ 180.315266][ T8103] BTRFS info (device loop2): auto enabling async discard [ 180.604247][ T8132] IPVS: Scheduler module ip_vs_ not found [ 181.042712][ T8142] loop1: detected capacity change from 0 to 2048 [ 181.085570][ T8142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.236936][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.652863][ T8137] loop4: detected capacity change from 0 to 32768 [ 181.677726][ T8137] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.559 (8137) [ 181.759141][ T8137] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.771167][ T8140] loop3: detected capacity change from 0 to 32768 [ 181.789341][ T8137] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 181.800382][ T8140] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 181.819418][ T8137] BTRFS info (device loop4): using free space tree [ 181.849315][ T8140] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.914405][ T28] audit: type=1800 audit(1756252035.689:273): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.560" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 181.997085][ T8137] BTRFS info (device loop4): enabling ssd optimizations [ 182.005245][ T8137] BTRFS info (device loop4): auto enabling async discard [ 182.017169][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.088425][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 182.095196][ T6048] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.226728][ T5870] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 182.244119][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.281127][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.306764][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.328834][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.355119][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.400014][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.433178][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.466343][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.501308][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.540351][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.576199][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.601409][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.627009][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.640471][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.656584][ T8173] usb usb8: usbfs: process 8173 (syz.1.566) did not claim interface 0 before use [ 182.665804][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.687717][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.714542][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.737682][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.747282][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.761249][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.796524][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.804623][ T5870] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.825009][ T5870] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.841924][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.849630][ T8182] loop1: detected capacity change from 0 to 128 [ 182.858982][ T5870] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 182.871124][ T5870] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 182.881365][ T8182] EXT4-fs (loop1): Test dummy encryption mode enabled [ 182.891695][ T5870] usb 3-1: Product: syz [ 182.895888][ T5870] usb 3-1: Manufacturer: syz [ 182.911151][ T8182] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.940163][ T5870] usb 3-1: SerialNumber: syz [ 182.949713][ T5870] usb 3-1: config 0 descriptor?? [ 182.968605][ T8182] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.994532][ T5870] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 183.187399][ T8178] loop3: detected capacity change from 0 to 32768 [ 183.226949][ T8182] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 183.252834][ T5833] usb 3-1: USB disconnect, device number 13 [ 183.253184][ T8178] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 183.271372][ T5833] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 183.279726][ T8178] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.354395][ T8178] XFS (loop3): Ending clean mount [ 183.354630][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.364931][ T8178] XFS (loop3): Quotacheck needed: Please wait. [ 183.477881][ T8178] XFS (loop3): Quotacheck: Done. [ 183.559816][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.821201][ T8203] input: syz0 as /devices/virtual/input/input11 [ 184.115351][ T8213] loop2: detected capacity change from 0 to 1024 [ 184.122888][ T8213] EXT4-fs: inline encryption not supported [ 184.138828][ T8213] EXT4-fs: Ignoring removed bh option [ 184.149937][ T8213] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.178533][ T8216] loop3: detected capacity change from 0 to 1024 [ 184.184787][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 184.193402][ T8216] EXT4-fs: Ignoring removed orlov option [ 184.210622][ T8213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.271824][ T8216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.285600][ T28] audit: type=1804 audit(1756252038.049:274): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.576" name="/newroot/130/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 184.313969][ T28] audit: type=1800 audit(1756252038.089:275): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.578" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 184.318379][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.343664][ T8215] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.352997][ T8215] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.362566][ T8215] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.371520][ T8215] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.431043][ T8215] vxlan0: entered promiscuous mode [ 184.509042][ T8216] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.578: Allocating blocks 481-513 which overlap fs metadata [ 184.517327][ T8225] loop1: detected capacity change from 0 to 164 [ 184.532986][ T8216] EXT4-fs (loop3): pa ffff888076205bc8: logic 288, phys. 385, len 8 [ 184.541721][ T8216] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 2 [ 184.590814][ T8225] rock: directory entry would overflow storage [ 184.602493][ T8225] rock: sig=0x66, size=4, remaining=3 [ 184.622251][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.653030][ T8225] rock: directory entry would overflow storage [ 184.662899][ T8225] rock: sig=0x66, size=4, remaining=3 [ 184.927659][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.771902][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 185.781195][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'. [ 185.984482][ T8257] loop3: detected capacity change from 0 to 32768 [ 186.101616][ T8257] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 186.118000][ T8262] netlink: 256 bytes leftover after parsing attributes in process `syz.1.590'. [ 186.136946][ T8262] netlink: 48 bytes leftover after parsing attributes in process `syz.1.590'. [ 186.207259][ T8257] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 186.263443][ T8257] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 186.275480][ T8257] OCFS2: File system is now read-only. [ 186.281430][ T8257] (syz.3.588,8257,1):ocfs2_dir_foreach_blk_id:1768 ERROR: Unable to read inode block for dir 65 [ 186.405659][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 186.648794][ T8280] loop1: detected capacity change from 0 to 256 [ 186.682834][ T8277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.167066][ T8295] netlink: 256 bytes leftover after parsing attributes in process `syz.3.601'. [ 187.187521][ T8295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.601'. [ 187.202422][ T8302] loop4: detected capacity change from 0 to 512 [ 187.277836][ T8302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.323311][ T8302] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.332779][ T8306] loop1: detected capacity change from 0 to 4096 [ 187.339630][ T5871] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.364500][ T8306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.368046][ T8309] netlink: 'syz.3.606': attribute type 5 has an invalid length. [ 187.405124][ T8309] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.414597][ T8309] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.419858][ T8306] EXT4-fs (loop1): shut down requested (0) [ 187.423434][ T8309] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.438387][ T8309] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.535756][ T6048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.546800][ T8309] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.555780][ T8309] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.565128][ T8309] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.567217][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 187.574163][ T8309] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.591695][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 187.608293][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.610158][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.641071][ T5871] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 187.650680][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.714055][ T5871] usb 3-1: config 0 descriptor?? [ 187.738272][ T8309] Zero length message leads to an empty skb [ 187.949656][ T8318] netlink: 256 bytes leftover after parsing attributes in process `syz.1.608'. [ 187.959386][ T8318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.608'. [ 188.205963][ T5871] wacom 0003:056A:0315.000C: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 188.232521][ T5871] wacom 0003:056A:0315.000C: hidraw0: USB HID v0.07 Device [HID 056a:0315] on usb-dummy_hcd.2-1/input0 [ 188.244688][ T8331] loop4: detected capacity change from 0 to 2048 [ 188.254322][ T5871] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.000C/input/input12 [ 188.293736][ T8329] netlink: 256 bytes leftover after parsing attributes in process `syz.1.611'. [ 188.357221][ T8334] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.516180][ T28] audit: type=1800 audit(1756252042.289:276): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.612" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 188.538320][ T9] usb 3-1: USB disconnect, device number 14 [ 188.781143][ T8346] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 188.794871][ T8346] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 189.254392][ T8358] __nla_validate_parse: 1 callbacks suppressed [ 189.254409][ T8358] netlink: 256 bytes leftover after parsing attributes in process `syz.4.619'. [ 189.279256][ T8358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.619'. [ 189.776395][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 189.904487][ T3458] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 189.976262][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 189.990847][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.004931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.024520][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 190.036421][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.050970][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.080490][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 190.139114][ T8374] loop2: detected capacity change from 0 to 32768 [ 190.223564][ T8374] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.257518][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 190.265683][ T9] usb 5-1: Manufacturer: syz [ 190.297055][ T9] usb 5-1: config 0 descriptor?? [ 190.421011][ T8374] XFS (loop2): Ending clean mount [ 190.448979][ T8374] XFS (loop2): Quotacheck needed: Please wait. [ 190.527985][ T8374] XFS (loop2): Quotacheck: Done. [ 190.609405][ T8401] loop1: detected capacity change from 0 to 4096 [ 190.656632][ T9] rc_core: IR keymap rc-hauppauge not found [ 190.662633][ T9] Registered IR keymap rc-empty [ 190.668431][ T8374] XFS (loop2): User initiated shutdown received. [ 190.680950][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.690984][ T8374] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 190.707322][ T8374] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 190.716379][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.755282][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 190.788278][ T8403] loop3: detected capacity change from 0 to 16 [ 190.793546][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 190.809743][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.840071][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.857793][ T8403] erofs: (device loop3): mounted with root inode @ nid 36. [ 190.908597][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.946365][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 190.996439][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.036393][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.085544][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.136717][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.201448][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.247159][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.279566][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 191.332618][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 191.347879][ T8418] "syz.1.635" (8418) uses obsolete ecb(arc4) skcipher [ 191.359278][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 191.391418][ T9] usb 5-1: USB disconnect, device number 9 [ 191.677657][ T7761] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 192.397595][ T8430] loop1: detected capacity change from 0 to 40427 [ 192.415372][ T8430] F2FS-fs (loop1): invalid crc value [ 192.468989][ T8430] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.640858][ T8430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.714600][ T8430] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 192.732834][ T8430] F2FS-fs (loop1): Stopped filesystem due to reason: 4 [ 192.744635][ T28] audit: type=1804 audit(1756252046.519:277): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.640" name="/newroot/184/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 192.832736][ T8449] loop2: detected capacity change from 0 to 32768 [ 192.946955][ T8449] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 193.076319][ T786] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.144979][ T8449] (syz.2.647,8449,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = 0 [ 193.283202][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.318150][ T8480] netlink: 256 bytes leftover after parsing attributes in process `syz.4.655'. [ 193.327970][ T786] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.333798][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.655'. [ 193.346800][ T786] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 193.366224][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.394449][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 193.402047][ T786] usb 4-1: config 0 descriptor?? [ 193.720142][ T786] usb 4-1: USB disconnect, device number 13 [ 194.069714][ T8482] loop4: detected capacity change from 0 to 65536 [ 194.090600][ T8482] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 194.124460][ T8482] XFS (loop4): Ending clean mount [ 194.452482][ T6048] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 194.501682][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.513204][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.739173][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 195.198694][ T8515] netlink: 256 bytes leftover after parsing attributes in process `syz.4.660'. [ 195.208193][ T8515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.660'. [ 195.376256][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 195.406296][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 195.422489][ T8509] loop2: detected capacity change from 0 to 32768 [ 195.450141][ T8509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.663 (8509) [ 195.500685][ T8509] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.526207][ T8509] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 195.534933][ T8509] BTRFS info (device loop2): using free space tree [ 195.716987][ T8509] BTRFS info (device loop2): enabling ssd optimizations [ 195.739609][ T8509] BTRFS info (device loop2): auto enabling async discard [ 195.807316][ T8546] loop1: detected capacity change from 0 to 1024 [ 195.957025][ T8546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.134771][ T5782] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.315966][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.363186][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.408865][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.450659][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.482901][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.495601][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.544502][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.585672][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.609995][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.665116][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 196.677158][ T42] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 196.801871][ T8579] loop2: detected capacity change from 0 to 512 [ 196.854852][ T8579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.868967][ T8579] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.107374][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.198744][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.363875][ T1319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.541752][ T1319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.703521][ T1319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.738272][ T8586] loop4: detected capacity change from 0 to 32768 [ 197.807922][ T1319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.896552][ T8586] loop4: detected capacity change from 32768 to 64 [ 197.916191][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 197.917419][ T8596] syz.4.681: attempt to access beyond end of device [ 197.917419][ T8596] loop4: rw=524288, sector=272, nr_sectors = 8 limit=64 [ 197.962215][ T8596] syz.4.681: attempt to access beyond end of device [ 197.962215][ T8596] loop4: rw=0, sector=272, nr_sectors = 8 limit=64 [ 198.006409][ T28] audit: type=1800 audit(1756252051.789:278): pid=8596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.681" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 198.115777][ T6048] syz-executor: attempt to access beyond end of device [ 198.115777][ T6048] loop4: rw=0, sector=288, nr_sectors = 8 limit=64 [ 198.146227][ T6048] metapage_read_end_io: I/O error [ 198.146345][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.151290][ T6048] read_mapping_page failed! [ 198.151341][ T6048] diRead: read_metapage failed [ 198.187885][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.200191][ T6048] jfs_lookup: iget failed on inum 32 [ 198.212424][ T6048] syz-executor: attempt to access beyond end of device [ 198.212424][ T6048] loop4: rw=0, sector=288, nr_sectors = 8 limit=64 [ 198.229805][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.249417][ T6048] metapage_read_end_io: I/O error [ 198.256641][ T6048] read_mapping_page failed! [ 198.262544][ T6048] diRead: read_metapage failed [ 198.267957][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.287493][ T6048] jfs_lookup: iget failed on inum 32 [ 198.310902][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.351062][ T9] usb 4-1: config 0 descriptor?? [ 198.392644][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.405466][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.416525][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.426585][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.438342][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.446282][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.508141][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.515814][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.525300][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.539102][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.547047][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.550087][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.550087][ T12] loop4: rw=1, sector=264, nr_sectors = 8 limit=64 [ 198.571526][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.585127][ T12] metapage_write_end_io: I/O error [ 198.599714][ T112] jfsCommit: attempt to access beyond end of device [ 198.599714][ T112] loop4: rw=0, sector=160, nr_sectors = 8 limit=64 [ 198.627193][ T7373] syz.4.353: attempt to access beyond end of device [ 198.627193][ T7373] loop4: rw=1, sector=264, nr_sectors = 8 limit=64 [ 198.641274][ T112] metapage_read_end_io: I/O error [ 198.641755][ T8605] loop2: detected capacity change from 0 to 512 [ 198.647364][ T112] read_mapping_page failed! [ 198.661766][ T7373] metapage_write_end_io: I/O error [ 198.670201][ T112] jfsCommit: attempt to access beyond end of device [ 198.670201][ T112] loop4: rw=0, sector=160, nr_sectors = 8 limit=64 [ 198.674149][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.674149][ T12] loop4: rw=1, sector=264, nr_sectors = 8 limit=64 [ 198.683829][ T112] metapage_read_end_io: I/O error [ 198.703338][ T112] read_mapping_page failed! [ 198.712532][ T8605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.733180][ T12] metapage_write_end_io: I/O error [ 198.746906][ T112] jfsCommit: attempt to access beyond end of device [ 198.746906][ T112] loop4: rw=0, sector=160, nr_sectors = 8 limit=64 [ 198.763344][ T7373] metapage_write_end_io: I/O error [ 198.769096][ T112] metapage_read_end_io: I/O error [ 198.774369][ T112] read_mapping_page failed! [ 198.802104][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 198.809761][ T8605] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.690: invalid indirect mapped block 4294967295 (level 0) [ 198.810433][ T8605] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.690: invalid indirect mapped block 4294967295 (level 1) [ 198.864812][ T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 198.885700][ T8605] EXT4-fs (loop2): 1 orphan inode deleted [ 198.892129][ T8605] EXT4-fs (loop2): 1 truncate cleaned up [ 198.899869][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.979736][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.040616][ T7373] metapage_write_end_io: I/O error [ 199.056455][ T7373] metapage_write_end_io: I/O error [ 199.062789][ T7373] metapage_write_end_io: I/O error [ 199.086024][ T27] usb 4-1: USB disconnect, device number 14 [ 199.102802][ T7373] metapage_write_end_io: I/O error [ 199.141084][ T7373] metapage_write_end_io: I/O error [ 199.163536][ T7373] metapage_write_end_io: I/O error [ 199.184849][ T7373] metapage_write_end_io: I/O error [ 199.214830][ T7373] metapage_write_end_io: I/O error [ 199.712383][ T1319] gretap0 (unregistering): left promiscuous mode [ 199.795378][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 200.082684][ T8636] loop3: detected capacity change from 0 to 128 [ 200.208436][ T28] audit: type=1800 audit(1756252053.979:279): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.697" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 200.656332][ T50] Bluetooth: hci3: command tx timeout [ 200.810755][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.831183][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.856392][ T8600] bridge_slave_0: entered allmulticast mode [ 200.856852][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.880838][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.890801][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.893297][ T8600] bridge_slave_0: entered promiscuous mode [ 200.997833][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.009892][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.020080][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.134081][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.182626][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.203057][ T8647] loop3: detected capacity change from 0 to 32768 [ 201.203202][ T8600] bridge_slave_1: entered allmulticast mode [ 201.238957][ T8647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.698 (8647) [ 201.270013][ T8600] bridge_slave_1: entered promiscuous mode [ 201.272273][ T8647] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.368722][ T8647] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 201.396023][ T8647] BTRFS info (device loop3): turning on async discard [ 201.403016][ T1319] batadv_slave_1: left promiscuous mode [ 201.409709][ T8647] BTRFS info (device loop3): using free space tree [ 201.422785][ T1319] hsr_slave_0: left promiscuous mode [ 201.431336][ T1319] hsr_slave_1: left promiscuous mode [ 201.439109][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.447388][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.456359][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.464256][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.473477][ T1319] bridge_slave_1: left allmulticast mode [ 201.483156][ T1319] bridge_slave_1: left promiscuous mode [ 201.491657][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.506574][ T1319] bridge_slave_0: left allmulticast mode [ 201.513856][ T1319] bridge_slave_0: left promiscuous mode [ 201.519968][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.524172][ T8647] BTRFS info (device loop3): enabling ssd optimizations [ 201.608271][ T1319] veth1_macvtap: left promiscuous mode [ 201.614189][ T1319] veth0_macvtap: left promiscuous mode [ 201.626033][ T1319] veth1_vlan: left promiscuous mode [ 201.633769][ T1319] veth0_vlan: left promiscuous mode [ 201.969665][ T5779] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.532005][ T1319] team0 (unregistering): Port device team_slave_1 removed [ 202.592301][ T1319] team0 (unregistering): Port device team_slave_0 removed [ 202.650833][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.704587][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.736289][ T5783] Bluetooth: hci3: command tx timeout [ 203.062989][ T5783] Bluetooth: hci1: command tx timeout [ 203.303947][ T1319] bond0 (unregistering): Released all slaves [ 203.397814][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.410689][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.592670][ T8600] team0: Port device team_slave_0 added [ 203.617910][ T8600] team0: Port device team_slave_1 added [ 203.649697][ T3458] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 203.927442][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.934425][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.992912][ T8600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.006513][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.013482][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.050697][ T8600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.255313][ T8706] loop2: detected capacity change from 0 to 32768 [ 204.328892][ T8706] JBD2: Ignoring recovery information on journal [ 204.411006][ T8706] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 204.441868][ T8706] [ 204.442404][ T8600] hsr_slave_0: entered promiscuous mode [ 204.444564][ T8706] ====================================================== [ 204.444572][ T8706] WARNING: possible circular locking dependency detected [ 204.464152][ T8706] 6.6.102-syzkaller #0 Not tainted [ 204.469275][ T8706] ------------------------------------------------------ [ 204.476326][ T8706] syz.2.707/8706 is trying to acquire lock: [ 204.482224][ T8706] ffff88805c795118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xada/0x11f0 [ 204.494433][ T8706] [ 204.494433][ T8706] but task is already holding lock: [ 204.501885][ T8706] ffff88805c793ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 204.511364][ T8706] [ 204.511364][ T8706] which lock already depends on the new lock. [ 204.511364][ T8706] [ 204.521770][ T8706] [ 204.521770][ T8706] the existing dependency chain (in reverse order) is: [ 204.530776][ T8706] [ 204.530776][ T8706] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 204.538594][ T8706] down_read+0x46/0x2e0 [ 204.543279][ T8706] ocfs2_init_acl+0x2fa/0x720 [ 204.548471][ T8706] ocfs2_mknod+0x12e5/0x20f0 [ 204.553578][ T8706] ocfs2_create+0x196/0x410 [ 204.558597][ T8706] path_openat+0x1277/0x3190 [ 204.563699][ T8706] do_filp_open+0x1c5/0x3d0 [ 204.568712][ T8706] do_sys_openat2+0x12c/0x1c0 [ 204.573895][ T8706] __x64_sys_openat+0x139/0x160 [ 204.579250][ T8706] do_syscall_64+0x55/0xb0 [ 204.584172][ T8706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.590578][ T8706] [ 204.590578][ T8706] -> #1 (jbd2_handle){++++}-{0:0}: [ 204.597864][ T8706] jbd2_journal_lock_updates+0xab/0x380 [ 204.603920][ T8706] __ocfs2_flush_truncate_log+0x2b8/0x10b0 [ 204.610240][ T8706] ocfs2_flush_truncate_log+0x4f/0x60 [ 204.616118][ T8706] ocfs2_sync_fs+0x117/0x310 [ 204.621228][ T8706] sync_filesystem+0x1c2/0x220 [ 204.626601][ T8706] generic_shutdown_super+0x6f/0x2b0 [ 204.632407][ T8706] kill_block_super+0x44/0x90 [ 204.637597][ T8706] deactivate_locked_super+0x97/0x100 [ 204.643480][ T8706] cleanup_mnt+0x429/0x4c0 [ 204.648408][ T8706] task_work_run+0x1ce/0x250 [ 204.653524][ T8706] exit_to_user_mode_loop+0xe6/0x110 [ 204.659330][ T8706] exit_to_user_mode_prepare+0xb1/0x140 [ 204.665391][ T8706] syscall_exit_to_user_mode+0x1a/0x50 [ 204.671364][ T8706] do_syscall_64+0x61/0xb0 [ 204.676286][ T8706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.682689][ T8706] [ 204.682689][ T8706] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 204.693190][ T8706] __lock_acquire+0x2ddb/0x7c80 [ 204.698548][ T8706] lock_acquire+0x197/0x410 [ 204.703557][ T8706] down_write+0x97/0x1f0 [ 204.708308][ T8706] ocfs2_xattr_set+0xada/0x11f0 [ 204.713668][ T8706] __vfs_setxattr+0x431/0x470 [ 204.718852][ T8706] __vfs_setxattr_noperm+0x12d/0x5e0 [ 204.724648][ T8706] vfs_setxattr+0x16c/0x2f0 [ 204.729667][ T8706] __se_sys_fsetxattr+0x426/0x4b0 [ 204.735201][ T8706] do_syscall_64+0x55/0xb0 [ 204.740124][ T8706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.746532][ T8706] [ 204.746532][ T8706] other info that might help us debug this: [ 204.746532][ T8706] [ 204.756754][ T8706] Chain exists of: [ 204.756754][ T8706] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem [ 204.756754][ T8706] [ 204.772479][ T8706] Possible unsafe locking scenario: [ 204.772479][ T8706] [ 204.779911][ T8706] CPU0 CPU1 [ 204.785255][ T8706] ---- ---- [ 204.790599][ T8706] lock(&oi->ip_xattr_sem); [ 204.795187][ T8706] lock(jbd2_handle); [ 204.801944][ T8706] lock(&oi->ip_xattr_sem); [ 204.809038][ T8706] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 204.816398][ T8706] [ 204.816398][ T8706] *** DEADLOCK *** [ 204.816398][ T8706] [ 204.824607][ T8706] 3 locks held by syz.2.707/8706: [ 204.829611][ T8706] #0: ffff888024428418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 [ 204.839473][ T8706] #1: ffff88805c7942d8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0 [ 204.849909][ T8706] #2: ffff88805c793ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 204.859810][ T8706] [ 204.859810][ T8706] stack backtrace: [ 204.865689][ T8706] CPU: 0 PID: 8706 Comm: syz.2.707 Not tainted 6.6.102-syzkaller #0 [ 204.873649][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.883701][ T8706] Call Trace: [ 204.886975][ T8706] [ 204.889909][ T8706] dump_stack_lvl+0x16c/0x230 [ 204.894581][ T8706] ? load_image+0x3b0/0x3b0 [ 204.899075][ T8706] ? show_regs_print_info+0x20/0x20 [ 204.904264][ T8706] ? print_circular_bug+0x12b/0x1a0 [ 204.909463][ T8706] check_noncircular+0x2bd/0x3c0 [ 204.914393][ T8706] ? look_up_lock_class+0x75/0x140 [ 204.919495][ T8706] ? print_deadlock_bug+0x5d0/0x5d0 [ 204.924771][ T8706] ? lockdep_lock+0xe0/0x220 [ 204.929350][ T8706] ? lockdep_unlock+0x137/0x2d0 [ 204.934182][ T8706] ? _find_first_zero_bit+0xd3/0x100 [ 204.939457][ T8706] __lock_acquire+0x2ddb/0x7c80 [ 204.944301][ T8706] ? verify_lock_unused+0x140/0x140 [ 204.949482][ T8706] ? stack_trace_save+0x9c/0xe0 [ 204.954325][ T8706] lock_acquire+0x197/0x410 [ 204.958812][ T8706] ? ocfs2_xattr_set+0xada/0x11f0 [ 204.963828][ T8706] ? __might_sleep+0xe0/0xe0 [ 204.968414][ T8706] ? read_lock_is_recursive+0x20/0x20 [ 204.973767][ T8706] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 204.979501][ T8706] ? ocfs2_xattr_block_find+0x154/0x4c0 [ 204.985058][ T8706] down_write+0x97/0x1f0 [ 204.989310][ T8706] ? ocfs2_xattr_set+0xada/0x11f0 [ 204.994319][ T8706] ? down_read_killable+0x340/0x340 [ 204.999505][ T8706] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 205.004962][ T8706] ocfs2_xattr_set+0xada/0x11f0 [ 205.009804][ T8706] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 205.015548][ T8706] ? mark_lock+0x94/0x320 [ 205.019863][ T8706] ? verify_lock_unused+0x140/0x140 [ 205.025135][ T8706] ? verify_lock_unused+0x140/0x140 [ 205.030321][ T8706] ? evm_protected_xattr_common+0x170/0x190 [ 205.036206][ T8706] ? evm_protect_xattr+0x534/0x7a0 [ 205.041303][ T8706] ? ocfs2_xattr_security_get+0x40/0x40 [ 205.046844][ T8706] __vfs_setxattr+0x431/0x470 [ 205.051514][ T8706] __vfs_setxattr_noperm+0x12d/0x5e0 [ 205.057058][ T8706] vfs_setxattr+0x16c/0x2f0 [ 205.061553][ T8706] ? xattr_permission+0x470/0x470 [ 205.066563][ T8706] ? sb_start_write+0x110/0x1c0 [ 205.071403][ T8706] ? __se_sys_fsetxattr+0x3d4/0x4b0 [ 205.076599][ T8706] __se_sys_fsetxattr+0x426/0x4b0 [ 205.081612][ T8706] ? __x64_sys_fsetxattr+0xc0/0xc0 [ 205.086740][ T8706] ? lockdep_hardirqs_on+0x98/0x150 [ 205.091932][ T8706] ? __x64_sys_fsetxattr+0x20/0xc0 [ 205.097028][ T8706] do_syscall_64+0x55/0xb0 [ 205.101429][ T8706] ? clear_bhb_loop+0x40/0x90 [ 205.106088][ T8706] ? clear_bhb_loop+0x40/0x90 [ 205.110843][ T8706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.116833][ T8706] RIP: 0033:0x7ff15358ebe9 [ 205.121277][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.140959][ T8706] RSP: 002b:00007ff154449038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 205.149361][ T8706] RAX: ffffffffffffffda RBX: 00007ff1537b5fa0 RCX: 00007ff15358ebe9 [ 205.157319][ T8706] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000004 [ 205.165377][ T8706] RBP: 00007ff153611e19 R08: 0000000000000001 R09: 0000000000000000 [ 205.173331][ T8706] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 205.181289][ T8706] R13: 00007ff1537b6038 R14: 00007ff1537b5fa0 R15: 00007fff203058a8 [ 205.189250][ T8706] [ 205.199174][ T50] Bluetooth: hci1: command tx timeout [ 205.204742][ T5783] Bluetooth: hci3: command tx timeout [ 205.320221][ T8600] hsr_slave_1: entered promiscuous mode [ 205.356041][ T5782] ocfs2: Unmounting device (7,2) on (node local) [ 205.633518][ T1319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.643896][ T1319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.714045][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 205.734753][ T1319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.746007][ T1319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.805172][ T1319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.819907][ T1319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.869386][ T1319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.880242][ T1319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.895435][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.902830][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.910715][ T8652] bridge_slave_0: entered allmulticast mode [ 205.919652][ T8652] bridge_slave_0: entered promiscuous mode [ 205.936705][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.945490][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.953241][ T8652] bridge_slave_1: entered allmulticast mode [ 205.963658][ T8652] bridge_slave_1: entered promiscuous mode [ 206.005435][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.021807][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.089263][ T8652] team0: Port device team_slave_0 added [ 206.110495][ T8652] team0: Port device team_slave_1 added [ 206.156480][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.173277][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.181475][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.208518][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.233749][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.240891][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.269442][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.295322][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.315753][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.322862][ T7761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.343665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.350908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.364333][ T8652] hsr_slave_0: entered promiscuous mode [ 206.372542][ T8652] hsr_slave_1: entered promiscuous mode [ 206.381850][ T8652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.389656][ T8652] Cannot create hsr debugfs directory [ 206.781730][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.804895][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.867183][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.885354][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.892537][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.910705][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.917890][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.965365][ T1319] hsr_slave_0: left promiscuous mode [ 206.972872][ T1319] hsr_slave_1: left promiscuous mode [ 206.981097][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.989560][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.999119][ T1319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.006826][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.014539][ T1319] bridge_slave_1: left allmulticast mode [ 207.020368][ T1319] bridge_slave_1: left promiscuous mode [ 207.026034][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.034291][ T1319] bridge_slave_0: left allmulticast mode [ 207.040209][ T1319] bridge_slave_0: left promiscuous mode [ 207.045853][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.058676][ T1319] veth1_macvtap: left promiscuous mode [ 207.064198][ T1319] veth0_macvtap: left promiscuous mode [ 207.070853][ T1319] veth1_vlan: left promiscuous mode [ 207.076208][ T1319] veth0_vlan: left promiscuous mode [ 207.216394][ T5783] Bluetooth: hci3: command tx timeout [ 207.221820][ T5783] Bluetooth: hci1: command tx timeout [ 207.242510][ T1319] team0 (unregistering): Port device team_slave_1 removed [ 207.275819][ T1319] team0 (unregistering): Port device team_slave_0 removed [ 207.308665][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.340350][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.414385][ T1319] bond0 (unregistering): Released all slaves [ 207.685080][ T8600] veth0_vlan: entered promiscuous mode [ 207.742698][ T8600] veth1_vlan: entered promiscuous mode [ 207.821225][ T8600] veth0_macvtap: entered promiscuous mode [ 207.844654][ T8600] veth1_macvtap: entered promiscuous mode [ 207.866744][ T1319] IPVS: stop unused estimator thread 0... [ 207.878842][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.891680][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.901615][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.912873][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.924119][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.934522][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.961387][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.987024][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.002302][ T8600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.026374][ T8600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.047400][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.120218][ T8600] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 208.149855][ T7761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.155819][ T8600] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 208.166039][ T7761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.190638][ T7761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.210139][ T7761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.299187][ T8652] veth0_vlan: entered promiscuous mode [ 208.313132][ T8652] veth1_vlan: entered promiscuous mode [ 208.358163][ T8652] veth0_macvtap: entered promiscuous mode [ 208.367420][ T8652] veth1_macvtap: entered promiscuous mode [ 208.384290][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.395454][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.408241][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.420616][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.431866][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.443173][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.455205][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.469990][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.480734][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.490835][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.502750][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.513239][ T8652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.527929][ T8652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.539719][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.592591][ T8652] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 208.620696][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.632118][ T8652] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 208.640882][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.670132][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.679008][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.296355][ T5783] Bluetooth: hci1: command tx timeout